Ahamed Rizvan
@ahamedrizvan0 followers39 downloads51 copies7 likes864 views
13 detections
Filters
Last updated
All Time
Detection languages
13
Categories
4
4
3
1
1
Platforms
9
5
2
2
Products / Services
8
5
1
MITRE Techniques
4
4
3
3
3
This rule identifies software installed on devices that has reached its End of Support (EOS) version. It provides details such as the device name, software name, vendor, version, EOS status, and EOS date, which is crucial for identifying potential security risks due to unpatched or unsupported software.
This rule identifies software installed on devices that is approaching its end-of-support (EOS) date. It queries the DeviceTvmSoftwareInventory table to find software with an 'Upcoming EOS Version' status, providing details such as device name, software name, vendor, version, EOS status, and EOS date. This can help in proactive patch management and identifying potential security risks associated with outdated software.
This rule detects if the Antivirus (AV) mode on a Windows device, as reported by DeviceTvmInfoGathering, is not set to '0'. A non-zero AvMode could indicate that the antivirus is not in a default or expected state, potentially suggesting a disabled or misconfigured AV.
Page 2 of 2