Thursday, October 10, 2024

Tanium Questions help for Windows Servers Patching

Get Computer Name and Patch - Patch List Applicability[0,1] from all machines with Computer Name contains XXXXXXX Get Endpoint Configuration - Tools Status Details from all machines with Computer Name contains XXXX Get Patch - Is Process Running with computer name contains XXXX Get Computer Name and Patch - Maintenance Windows Applied?maxAge=60 from all machines with Computer Name contains XXXXX Get Computer Name and Patch - Applicable Patch Count[0] and Patch - Maintenance Windows Applied from all machines with Computer Name contains XXXXXX Get Computer Name and Operating System and Patch - Scan Errors from all machines with ( all Patch - Scan Errors not contains No Scan Errors and Computer Name contains XXX ) Get Computer Name and Operating System and Patch - Scan Errors from all machines with ( all Patch - Scan Errors not contains No Scan Errors and Operating System contains Windows server ) Get Computer Name from all machines with ( Patch - Manifest Sync State[3] contains XML and Custom Tags matches patch and Computer Name contains XXX ) Get Computer Name and Tanium Action Log[911118,100] from all machines with Computer Name equals XXX Get Computer Name and Patch - Blacklists Applied from all machines with Operating System contains windows server Get Computer Name and Operating System and Patch - Patch List Applicability[0,1] matches "^[^|]*\b6\b[^|]*\|[^|]*\|[^|]*\|Not Installed\|.*$" from all machines with ( Is Windows equals True and Patch - Patch List Applicability[0,1] matches "^[^|]*\b6\b[^|]*\|[^|]*\|[^|]*\|Not Installed\|.*$" ) Get Computer Name and Operating System and Patch - Applicable Patch Count[0] and Patch - Patch List Applicability[0,1] matches "^[^|]*\b6\b[^|]*\|[^|]*\|[^|]*\|Not Installed\|.*$" from all machines with Custom Tags matches patch Get Computer Name and Patch - Applicable Patch Count[0] and Patch - Patch List Applicability[0,1] matches "^[^|]*\b6\b[^|]*\|[^|]*\|[^|]*\|.*$" from all machines with ( Computer Name contains XXXX and Operating System contains windows server ) Note: here XXXX is a computername here b6 is patch list ID

Wednesday, October 9, 2024

To check patch deployment status in TANIUM

Get Computer Name and Operating System and Patch - Deployment Statuses matches "^1234\|.*$" from all machines with Patch - Deployment Statuses matches "^1234\|.*$" Note: here 1234 is deployment ID , so you need to switch it based on your ID

To download CAB file

http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab https://content.tanium.com/files/hosted_dats/MS-CVEs.dat https://content.tanium.com/files/windows-patch/wsusscn2.json

Wednesday, May 10, 2023

To download microsoft cab file

http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab


https://go.microsoft.com/fwlink/?LinkID=74689



if you are using Tanium


https://content.tanium.com/files/hosted_dats/MS-CVEs.dat

https://content.tanium.com/files/windows-patch/wsusscn2.json 

Thursday, April 15, 2021

Tuesday, December 13, 2016

To get physical hostname

SELECT  dbo.v_GS_OPERATING_SYSTEM.Caption0, dbo.v_GS_VIRTUAL_MACHINE_64.PhysicalHostName0, dbo.v_R_System.Name0
FROM    dbo.v_R_System INNER JOIN
           dbo.v_GS_OPERATING_SYSTEM ON dbo.v_R_System.ResourceID = dbo.v_GS_OPERATING_SYSTEM.ResourceID INNER JOIN
           dbo.v_GS_VIRTUAL_MACHINE_64 ON dbo.v_GS_OPERATING_SYSTEM.ResourceID = dbo.v_GS_VIRTUAL_MACHINE_64.ResourceID

  where v_r_system.name0 in (

SCCM to Tanium

SCCM transition Options: of course intune otherwise  Deployment, Patching - Tanium Image - Tazier Inventory - Tanium Remote Control - Zoom  ...