MacOS Anti-Malware Zero-Day Vulnerability Audit

Discover Outdated MacOS Machines

With the latest macOS 11.3 update, Apple fixes a critical vulnerability within their operating system. We advise you to update your Apple installations as soon as possible. The report below will help you with identifying all the Mac machines in your network and whether they are running version 11.3 or higher. With the added color-coding, you'll be able to easily spot and filter which ones are still out of date and need to be updated first. You can read our blog for more information.

 

MacOS Anti-Malware Zero-Day Vulnerability Query

Select Distinct Top 1000000 Coalesce(tsysOS.Image, 
tsysAssetTypes.AssetTypeIcon10) As icon, 
tblAssets.AssetID, 
tblAssets.AssetName, 
tblAssets.Domain, 
tblState.Statename As State, 
tblAssets.IPAddress, 
tsysIPLocations.IPLocation, 
tblAssetCustom.Manufacturer, 
tblAssetCustom.Model, 
tblMacOSInfo.SystemVersion, 
Case when tblMacOSInfo.SystemVersion LIKE '%11.3%' then 'Safe' 
When tblMacOSInfo.SystemVersion LIKE '%11.0%' then 'Vulnerable'
When tblMacOSInfo.SystemVersion LIKE '%11.1%' then 'Vulnerable'
When tblMacOSInfo.SystemVersion LIKE '%11.2%' then 'Vulnerable'
When tblMacOSInfo.SystemVersion LIKE '%10.%' then 'Vulnerable'
else 'Safe' end as [Vulnerable/Safe],
tblAssets.Lastseen, 
tblAssets.Lasttried,
Case when tblMacOSInfo.SystemVersion LIKE '%11.3%' then '#d4f4be'
When tblMacOSInfo.SystemVersion LIKE '%10.%' then '#ffadad'
When tblMacOSInfo.SystemVersion LIKE '%11.0%' then '#ffadad'
When tblMacOSInfo.SystemVersion LIKE '%11.1%' then '#ffadad'
When tblMacOSInfo.SystemVersion LIKE '%11.2%' then '#ffadad'
else '#d4f4be' end as backgroundcolor
From tblAssets 
Inner Join tblMacOSInfo On tblAssets.AssetID = tblMacOSInfo.AssetID 
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID 
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode 
Left Join tsysIPLocations On tblAssets.IPNumeric >= tsysIPLocations.StartIP 
And tblAssets.IPNumeric <= tsysIPLocations.EndIP 
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype 
Inner Join tblState On tblState.State = tblAssetCustom.State
Where tblAssetCustom.State = 1 And tsysAssetTypes.AssetTypename Like '%Mac%' And tblMacOSInfo.SystemVersion NOT LIKE '%Server%'
Order By tblAssets.Domain, 
tblAssets.AssetName

Audit and Take Action in 3 Easy Steps

1. Download & Install Lansweeper

3. Run the Audit & Take Action

Download Lansweeper to Run this Audit