The VMware Carbon Black Tech Zone is live! Checkout this great resource: Mastering Carbon Black Audit & Remediation.

Check EFI firmware version on MAC devices

Description: Shows the EFI version of a MAC device.

What The Data Shows: Older versions of EFI firmware are vulnerable, this allows the detection of outdated EFI firmware on MAC devices which can then be patched.

SQL: 

SELECT version 
FROM platform_info;
Tags (2)
2 Comments
tmccormack
Carbon Black Employee
Status changed to: Approved

Thank you @mjomha for submitting! I added an underscore between platform and info so it reads: platform_info. Without the underscore an error will return from osquery.

mjomha
Contributor

Thanks Tmccormack!

I must of missed that as I typed the query here manually instead of copy/pasting it. My bad!

 

Moe