System Not patched in Last 3 months

Hi Team,

I am trying to create an analysis which should let me know if a system is patched in last 3 months - It will evaluate either True or false.

I am using below relevance but it seems its not giving me correct result, I noticed some of my machines were already patched and it was throwing false. could some one help me with this.

(it <= (now - (365/4*day))) of (maximum of last write times of keys whose (name of it contains “.KB” or name of it contains “_KB” or name of it starts with “KB”) of keys( “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall”;“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages”;“HKEY_LOCAL_MACHINE \Software\Microsoft\WindowsNT\CurrentVersion\Hotfix”) of (registry; native registry))

Do you want >= instead of <= ?

1 Like