Hvis du har Cortex XDR så vil jeg anbefale å kjøre denne som en XQL-QUERY:
dataset = xdr_data
| filter (action_process_file_info contains """version""")
| alter productName = action_process_file_info -> product_name
| alter productVersion = action_process_file_info -> product_version
| fields productName, productVersion, agent_hostname , action_process_username
| sort asc productVersion
| comp last(_time ) as Time by agent_hostname, productName, productVersion, action_process_username
| filter (productName = """Firefox""")
| filter (action_process_file_info contains """version""")
| alter productName = action_process_file_info -> product_name
| alter productVersion = action_process_file_info -> product_version
| fields productName, productVersion, agent_hostname , action_process_username
| sort asc productVersion
| comp last(_time ) as Time by agent_hostname, productName, productVersion, action_process_username
| filter (productName = """Firefox""")
 |
| Lagre den som Widget to library og legg til ditt (nye) Software Dashboard. |
Du kan lage flere av den slik at du har for Firefox, Chrome osv
Den gir en veldig grei oversikt over hvilke enheter som bør oppgraderes.