The VMware Carbon Black Tech Zone is live! Checkout this great resource: Mastering Carbon Black Audit & Remediation.

Status of Windows Defender firewall

Description: Status of Windows Defender firewall.

What The Data Shows: This query can assist in compliance audits.

SQL: 

SELECT display_name,status,start_type 
FROM services
WHERE LOWER(name) = "mpssvc";

 

 

0 Votes
5 Comments
Query_Admin
Community Manager
Community Manager
Status changed to: Approved
 
gramajoma
New Contributor II

Query would not run as provided without removing the extra set of quotes around "mpssvc"

 

esullivan
Carbon Black Employee

@gramajoma - thx for the heads up, the query has been updated.

archimedes91
New Contributor II

Where is this run from?

When I run it from SQL Server Mgmt Studio, I get 'Invalid object name 'services''.

And, it will not run at the endpt cli

gramajoma
New Contributor II

@archimedes91 this is a Carbon Black LiveOps query. You'll need that add-on to CB Defense to run it from your predictive security cloud instance.