Dashboard Toolbox - NEW IG QIDs for Microsoft OS...Enrich Your Queries

Document created by DMFezzaReed Employee on Oct 19, 2018Last modified by DMFezzaReed Employee on Oct 19, 2018
Version 2Show Document
  • View in full screen mode

Qualys recently released twelve (12) new QIDs which when leveraged in your dashboard queries will enrich and fortify your metric results: 

 

  • QID:45340 - Microsoft Windows 7 Operating System Detected
  • QID:45341 - Microsoft Windows Server 2008 Operating System Detected
  • QID:45342 - Microsoft Windows 10 Operating System Detected
  • QID:45343 - Microsoft Windows Server 2008 Core Operating System Detected
  • QID:45344 - Microsoft Windows 8 Operating System Detected
  • QID:45345 - Microsoft Windows Server 2008 R2 Operating System Detected
  • QID:45346 - Microsoft Windows 8.1 Operating System Detected
  • QID:45347 - Microsoft Windows Server 2016 Operating System Detected
  • QID:45348 - Microsoft Windows Server 2012 R2 Operating System Detected
  • QID:45349 - Microsoft Windows Server 2016 Core Operating System Detected
  • QID:45350 - Microsoft Windows Server 2012 Core Operating System Detected
  • QID:45351 - Microsoft Windows Server 2012 Operating System Detected

 

Threat Protection Use Cases

1. Microsoft Windows Shell Remote Code Execution Vulnerability – CVE-2018-8414

Query for https://threatprotect.qualys.com/2018/08/28/microsoft-windows-shell-remote-code-execution-vulnerability-cve-2018-8414/

vulnerabilities.vulnerability.cveIds:CVE-2018-8414 and (vulnerabilities.vulnerability.qid:45342 or vulnerabilities.vulnerability.qid:45349)

 

 

2. Cortana Elevation of Privilege Vulnerability: CVE-2018-8140

Query for https://threatprotect.qualys.com/2018/06/13/cortana-elevation-of-privilege-vulnerability-cve-2018-8140/

vulnerabilities.vulnerability.cveIds:CVE-2018-8140 and (vulnerabilities.vulnerability.qid:45342 or vulnerabilities.vulnerability.qid:45349)

 

 

Back to Dashboarding and Reporting 

1 person found this helpful

Attachments

    Outcomes