Determine compliance and state of Windows security products using osquery

Description: List the registered Windows security products and determine if their state is on and whether the signatures are up to date.

SQL:

SELECT wsp.*,
CASE
WHEN state = 'On' AND signatures_up_to_date = 1 THEN 'TRUE'
ELSE 'FALSE'
END compliant
FROM windows_security_products wsp;

Operating Systems: Windows Only

Reference:

https://osquery.io/schema/current/#windows_security_products

#compliance #security_products