Skip to content

Instantly share code, notes, and snippets.

@terracatta
Created January 15, 2020 16:14
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save terracatta/94849fe25049a6e68d434e77660bfd96 to your computer and use it in GitHub Desktop.
Save terracatta/94849fe25049a6e68d434e77660bfd96 to your computer and use it in GitHub Desktop.
Osquery Detection for the presence of the patch that fixes CVE 2020 0601
SELECT 'true' AS CVE_2020_0601_patched,
hotfix_id,
description,
caption,
installed_by,
installed_on
FROM patches WHERE hotfix_id IN (
'KB4534306',
'KB4534271',
'KB4534276',
'KB4534293',
'KB4534273',
'KB4528760');
@terracatta
Copy link
Author

If you are looking to also determine if the device has been restarted since the update was installed check out https://gist.github.com/terracatta/83fb19fa97d2ca8cce93e1c32fe730b2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment