4 ms·
Can it be used to find Windows machines without MS17-010 installed? :)
by dduarte 9y ago
Can it be used to find Windows machines without MS17-010 installed? :)
- jeremymcanally 9y agoDefinitely. And you could write queries for the various indicators/files/etc., too (or use the built in YARA support and grab the rules from US-CERT). I just started working at Kolide (http://kolide.com http://kolide.com) a couple weeks ago where we're building a whole product on top of osquery. I'm constantly surprised by "can it do (x)" and the answer is almost always yes. It's pretty solid!