Hi community,
I'm breaking my head over a report reporting the last AV signature for my Windows systems. Due to 'old' registry entries, I have for some computers two entries in tblregistry for the McAfee DatVersion. For most of them only one (correct) entry, and some computers don't have an entry (because they don't hava AV).
Therefore, I want to do a join on the most recent "lastchanged" column from the table below to have the correct DatVersion.
Does anyone have an idea how I can do that?
assetid;regkey;valuename;value;lastchanged
1 HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVEngine AVDatVersion 6559 2018-07-02 11:57:25.427
1 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\AVEngine AVDatVersion 9387 2019-09-26 10:07:13.167
4 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\AVEngine AVDatVersion 9395 2019-10-02 10:02:26.950
11 HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVEngine AVDatVersion 6559 2018-12-12 14:47:02.040
11 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\AVEngine AVDatVersion 9373 2019-09-13 06:57:46.140
12 HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVEngine AVDatVersion 6559 2018-12-04 08:34:11.767
Thanks!
H
