[Help] CPM Properties and their relevance code

Hi,

Can someone please share the relevance code for the below properties from CPM,

  1. Virus Pattern Version
  2. Start time of last scan
  3. Program Version
  4. Trend Micro Adapter Service status
  5. Virus Scan engine Version 32 bit
  6. Virus Scan engine Version 64 bit

@steini44 @Aram @diwanker

Thanks in Advance,
Techadmin

Hi TechAdmin

I think a lot of them are already predefined properties in IBM BigFix. You can check the relevance of those to start:

And look for the desired property. There you can check the relevance and you can start from there to customize them.

Hope this helps.

@techadmin

I’ve checked real quick, they are all there. Is that what you’re looking for?

@steini44 Thanks for the prompt response. CPM license has expired and I cannot find any of these properties in the console as of now, It might take another 2 weeks for the customer to purchase it. But in the meanwhile I still want to track all of these properties and make sure they are all getting the latest patterns, scans, etc.,

So, if you can please share the code, I will go ahead and create these properties and everything will be good. The environment is a mess right now and This is my last hope to track them all.

Ow okay, I get it! I was already surprised by your question that you didn’t know that option :wink:

here you go!

Virus pattern version (I have 2):
(if (it = "") then "<N/A>" else (it as string)) of string "Version" of dictionary "P.4" of dictionary "AUComponents" of dictionary of file "/Library/Preferences/com.trendmicro.mpm.plist"

if ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." whose (exists value "InternalPatternVer" of it) of registry) AND ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." whose (exists value "ProgramVer" whose (it as string as version <= "1.6") of it) of registry) OR (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\iCRC Scan" whose (exists value "ScanType" whose (it as integer = 0) of it) of registry))) then (if (length of (value "InternalPatternVer" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." of registry as string) >= 6) then (((first (length of it - 5) of it) & "." & (first 3 of last 5 of it) & "." & (last 2 of it)) of (value "InternalPatternVer" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." of registry as string)) else (("0." & (first 3 of last 5 of it) & "." & (last 2 of it)) of (value "InternalPatternVer" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." of registry as string))) else (nothings)

Start Time of last scan:
if (exists true whose (exists value "LastScanStartTime" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" of registry))then (value "LastScanStartTime" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" of registry) else (nothings)

Program version:
if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" whose (exists value "Version" of it) of registry) then (if ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" whose (exists value "ServicePackVersion" of it) of registry) AND (value "ServicePackVersion" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" of registry as string > "0")) then ((value "Version" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" of registry as string) & " Service Pack " & (value "ServicePackVersion" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" of registry as string)) else (value "Version" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\CPM" of registry as string)) else (nothings)

Trend MIcro Adapter Service status:
if(exist running service whose (service name of it as lowercase equals "tmadptrsvr")) then true else false

Virus Scan Engine Version 32 bit:
if ((not x64 of operating system) AND exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." whose (exists value "VsApiNT-Ver" of it) of registry) then (value "VsApiNT-Ver" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." of registry as string) else (nothings)

64bit:
if ((x64 of operating system) AND exists key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." whose (exists value "VsApiNT-Ver" of it) of registry) then (value "VsApiNT-Ver" of key "HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc." of registry as string) else (nothings)

1 Like

LOL, haha I’m not that dumb :stuck_out_tongue:
Thank you so much, Appreciate your help.

1 Like