‎11-14-2019 12:42 PM
‎11-15-2019 01:51 PM
‎11-14-2019 05:36 PM
Select Top 1000000 tsysOS.Image As icon,
tblServicesUni.Name,
tblAssets.AssetName,
tblAssets.AssetID,
tblServicesUni.Caption,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tblAssets.Description,
tblAssets.Firstseen,
tblAssets.Lastseen
From tblServices
Inner Join tblAssets On tblServices.AssetID = tblAssets.AssetID
Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
Inner Join tblServicesUni On tblServices.ServiceuniqueID =
tblServicesUni.ServiceuniqueID
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Join tsysIPLocations On tsysIPLocations.StartIP <= tblAssets.IPNumeric
And tsysIPLocations.EndIP >= tblAssets.IPNumeric
Where tblServicesUni.Name Not Like '%[^0-9]%'
Order By tblAssets.AssetName
‎11-15-2019 12:25 PM
RKCar wrote:
If your requirement is simply to look for a service that is all numbers, the following should work. The reason for the double negative on the number check is because I read somewhere that IS_NUMERIC doesn't always work as intended.
This is a modification of the automatic services not started on client report. In addition to checking to make sure the service is just a combination of numbers, a few fields have been removed, it was opened up to both client and server, and it no longer cares about the service state.
This report by no means should be used as a foolproof method to determine if Emotet exists on a system in your environment, but it can be used to supplement per what you requested. Also worth noting I have no services that are purely numbers in my environment so a verification wasn't performed to what I would typically like to do.Select Top 1000000 tsysOS.Image As icon,
tblServicesUni.Name,
tblAssets.AssetName,
tblAssets.AssetID,
tblServicesUni.Caption,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tblAssets.Description,
tblAssets.Firstseen,
tblAssets.Lastseen
From tblServices
Inner Join tblAssets On tblServices.AssetID = tblAssets.AssetID
Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
Inner Join tblServicesUni On tblServices.ServiceuniqueID =
tblServicesUni.ServiceuniqueID
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Join tsysIPLocations On tsysIPLocations.StartIP <= tblAssets.IPNumeric
And tsysIPLocations.EndIP >= tblAssets.IPNumeric
Where tblServicesUni.Name Not Like '%[^0-9]%'
Order By tblAssets.AssetName
Experience Lansweeper with your own data. Sign up now for a 14-day free trial.
Try Now