Report: Intel-SA-00086 vulnerability check

[Bruce_B]

This report lists all computers on which the Intel Discovery tool for vulnerability Intel-SA-00086 has been run. Registry scanning set up as per this post and having run this deployment package are prerequisite for this report to yield its expected results.

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblProcessor.Name As CPU,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  Case
    When tblRegistry.Value Is Null Then
    'Intel tool has not been run or the registry value has not yet been scanned'
    Else tblRegistry.Value End As value,
  Case When (tblRegistry.Value Like '%This system is vulnerable%') Then 'red'
    When (tblRegistry.Value Like '%Detection error%' Or
    tblRegistry.Value Is Null) Then 'black' Else 'green' End As foregroundcolor,
  TsysLastscan.Lasttime As RegLastScanned,
  tblAssets.Lastseen,
  tblAssets.Lasttried
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblProcessor On tblAssets.AssetID = tblProcessor.AssetID
  Left Join tblRegistry On tblAssets.AssetID = tblRegistry.AssetID And
    tblRegistry.Valuename = 'System Risk'
  Left Join TsysLastscan On TsysLastscan.AssetID = tblAssets.AssetID And
    TsysLastscan.CFGcode = 50
  Left Join tblOperatingsystem On tblAssets.AssetID = tblOperatingsystem.AssetID
Where tblAssetCustom.Model Not Like '%Virtual%' And
  tsysAssetTypes.AssetTypename = 'Windows' And (tblOperatingsystem.Caption Like
    '%Windows 10%' Or tblOperatingsystem.Caption Like '%Windows 8%' Or
    tblOperatingsystem.Caption Like '%Windows 7%' Or
    tblOperatingsystem.Caption Like '%Windows Server 2012%' Or
    tblOperatingsystem.Caption Like '%Windows Server 2016%')