I'm using this report to check if any new and unknown software has been installed on my estate:
Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblAssets.Username,
tblAssets.Userdomain,
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblSoftwareUni.Added,
tblAssets.IPAddress,
tsysIPLocations.IPLocation
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Right Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tblSoftwareHist On tblSoftwareHist.softid = tblSoftwareUni.SoftID
Where tblSoftwareUni.Added > GetDate() - 7 And
SubString(tblSoftwareUni.softwareName, 1, 10) Not In (Select
SubString(tblSoftwareUni.softwareName, 1, 10) From tblSoftwareUni
Where tblSoftwareUni.Added < GetDate() - 7) And
tblSoftwareUni.SoftwarePublisher Is Not Null
Order By tblSoftwareUni.Added Desc