Forum Discussion
SalishSeaSecurity
Altostratus
AltostratusPrelogon AV check: database age
I'm trying to build a prelogon sequence that will not only look for running AV, but also check for the age of the signature database. I know this is easily done via properties in the Windows AV Check...
Justinian_48178
Nimbostratus
NimbostratusI had your same problem but I couldn't use the inspector because that would have prevented access to the login page and I just wanted to use the item for a Protected Configuration.
I ended up solving it with:
session.detected_av.av_1.database_age <= 7
That will cover all of the possible AVs without having to specify each one individually (although we are tempted to specify them individually so that we can state which ones we trust.)
Hope it helps someone,
Justinian
