Skip to main content

Update WinRE Partition Detection

Summary​

This monitor detects online Windows machines whose OS falls under the following criteria:
c.os NOT REGEXP 'Windows.* (XP|20(03|12)|8|7)' AND c.version REGEXP '22(621|631|000)|190(41|42|44|45)|20348'.
It also ensures that the script runs once on the agent.

Dependencies​

KB5034957 - CVE-2024-20666 - Updating the WinRE partition

Target​

  • Windows Workstations
  • Windows Servers

The monitor itself has the criteria to filter out the supported OS.

Ticketing​

Subject

KB5034957 - CVE-2024-20666 - Updating the WinRE partition failed for %ClientName%/%ComputerName%

Body

The script failed to execute the requested process.  
PowerShell Full Output: @psout@  
@Compinfo@

Note: Here, @psout@ is the result of the script and @compinfo@ contains the computer details:

  • Computer Name
  • OS
  • Last User Name
  • Serial Number
  • BIOS Version (Manufacturer)

Additionally, ticketing is enabled under the script. Refer to the script document for instructions on how to enable it under Global Parameters.