I wanted to ask if someone could help me with this relevance. I’m getting confused with the “whose, it, of” commands.
Instead of targeting a single version as shown below:
exists keys "MBAM" whose (value "AgentVersion" of it as string as version = "2.5.1100.0" as version) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" of (x64 registries;x32 registries)
I want to target a version between X and Y, as wrongly showing below:
exists key "MBAM" whose (value "AgentVersion" of it as string as version (it >= "2.5.1100.0" AND it < "2.5.1135.0") as version) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" of (x64 registries;x32 registries)
I’m hoping I’m at least close…just having a bit of trouble.
exists key “MBAM” whose (value “AgentVersion” of it as string as version >= “2.5.1100.0” AND value “AgentVersion” of it as string as version < “2.5.1135.0” as version) of keys “hklm\software\microsoft” of (x64 registries;x32 registries)
Just to offer a little insight, it’s not cheating as much as BigFix relevance being “Literal”. When you tell BigFix to provide a value, it maintains the current data type (e.g. Singular Registry Value, String, Integer, etc.). To perform mathematical operations, you have to specify the format you want the data in (e.g. as string, as integer, as version, etc.). A great tip if you’re working in FixletDebugger and get the error “Incompatible Data Types”