Notification

Icon
Error

Report: Intel-SA-00086 vulnerability check

Posted: Tuesday, December 5, 2017 1:47:34 PM(UTC)
Bruce.B

Bruce.B

Member Administration Original PosterPosts: 529
3
Like
This report lists all computers on which the Intel Discovery tool for vulnerability Intel-SA-00086 has been run. Registry scanning set up as per this post and having run this deployment package are prerequisite for this report to yield its expected results.

Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblProcessor.Name As CPU,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  Case
    When tblRegistry.Value Is Null Then
    'Intel tool has not been run or the registry value has not yet been scanned'
    Else tblRegistry.Value End As value,
  Case When (tblRegistry.Value Like '%This system is vulnerable%') Then 'red'
    When (tblRegistry.Value Like '%Detection error%' Or
    tblRegistry.Value Is Null) Then 'black' Else 'green' End As foregroundcolor,
  TsysLastscan.Lasttime As RegLastScanned,
  tblAssets.Lastseen,
  tblAssets.Lasttried
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblProcessor On tblAssets.AssetID = tblProcessor.AssetID
  Left Join tblRegistry On tblAssets.AssetID = tblRegistry.AssetID And
    tblRegistry.Valuename = 'System Risk'
  Left Join TsysLastscan On TsysLastscan.AssetID = tblAssets.AssetID And
    TsysLastscan.CFGcode = 50
  Left Join tblOperatingsystem On tblAssets.AssetID = tblOperatingsystem.AssetID
Where tblAssetCustom.Model Not Like '%Virtual%' And
  tsysAssetTypes.AssetTypename = 'Windows' And (tblOperatingsystem.Caption Like
    '%Windows 10%' Or tblOperatingsystem.Caption Like '%Windows 8%' Or
    tblOperatingsystem.Caption Like '%Windows 7%' Or
    tblOperatingsystem.Caption Like '%Windows Server 2012%' Or
    tblOperatingsystem.Caption Like '%Windows Server 2016%')
Bruce.B
#1Bruce.B Member Administration Original PosterPosts: 529  
posted: 12/5/2017 2:22:24 PM(UTC)
If you have any feedback or questions regarding this topic, please contact us via support@lansweeper.com.
Bruce.B
#2Bruce.B Member Administration Original PosterPosts: 529  
posted: 12/11/2017 6:06:14 PM(UTC)
A version of the report that only displays non-virtual machine Intel CPU computers:

Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblProcessor.Name As CPU,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  Case
    When tblRegistry.Value Is Null Then
    'Intel tool has not been run or the registry value has not yet been scanned'
    Else tblRegistry.Value End As value,
  Case When (tblRegistry.Value Like '%This system is vulnerable%') Then 'red'
    When (tblRegistry.Value Like '%Detection error%' Or
    tblRegistry.Value Is Null) Then 'black' Else 'green' End As foregroundcolor,
  TsysLastscan.Lasttime As RegLastScanned,
  tblAssets.Lastseen,
  tblAssets.Lasttried
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblProcessor On tblAssets.AssetID = tblProcessor.AssetID
  Left Join tblRegistry On tblAssets.AssetID = tblRegistry.AssetID And
    tblRegistry.Valuename = 'System Risk'
  Left Join TsysLastscan On TsysLastscan.AssetID = tblAssets.AssetID And
    TsysLastscan.CFGcode = 50
Where tblAssetCustom.Model Not Like '%Virtual%' And
  tblProcessor.Name Like '%intel%' And tblAssetCustom.State = 1
Order By tblAssets.Domain,
  tblAssets.AssetName

Active Discussions

Lansweeper How do you scan your assets on your network?
by  CyberCitizen   Go to last post Go to first unread
Last post: Today at 1:14:18 AM(UTC)
Lansweeper How EXACTLY Does LS Count Assets?
by  vqT4cDoP9iXyMZwoDUWU  
Go to last post Go to first unread
Last post: Yesterday at 10:14:48 PM(UTC)
Lansweeper URL for Custom Reports
by  Joe Conger   Go to last post Go to first unread
Last post: Yesterday at 6:52:06 PM(UTC)
Lansweeper Add Document as File Link
by  mowo  
Go to last post Go to first unread
Last post: Yesterday at 2:00:25 PM(UTC)
Lansweeper Table View Filter
by  tgt   Go to last post Go to first unread
Last post: Yesterday at 8:30:44 AM(UTC)
Lansweeper How to scan assets on a different network
by  twpseaton  
Go to last post Go to first unread
Last post: 6/25/2019 10:04:36 PM(UTC)
Lansweeper Lansweeper warnings sent to an email
by  MilicaM   Go to last post Go to first unread
Last post: 6/25/2019 2:23:29 PM(UTC)
Lansweeper ShellRunAs action in Lansweeper
by  DavidL  
Go to last post Go to first unread
Last post: 6/25/2019 11:58:07 AM(UTC)