https://github.com/osquery/osquery logo
#windows
Title
# windows
h

Hugh (Zercurity)

02/16/2022, 8:47 PM
@Avik Sengupta
Copy code
SELECT
  COUNT(*) AS passed
FROM
  registry
WHERE
  key = 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU'
  AND name = 'NoAutoUpdate'
  AND data = '0';
a

Avik Sengupta

02/16/2022, 9:12 PM
So with this query, '0' is good?
h

Hugh (Zercurity)

02/16/2022, 9:14 PM
The query is checking that autouodate isn't disabled
It should return a 1 if auto update is enabled
a

Avik Sengupta

02/16/2022, 9:17 PM
OK. It's returning 0 on my machine, where updates are enabled, afaics
I'll investigate.
8 Views