Built off the open source project Osquery
Description: Shows if you have TFTP enabled, disabled or absent in your windows environment.
What The Data Shows: TFTP does not have built-in encryption, access control or authentication. This makes it very easy for an attacker to trick TFTP into giving access to files.
SQL: SELECT name, caption, state,
CASE state
WHEN 1 THEN 'Enabled'
WHEN 2 THEN 'Disabled'
WHEN 3 THEN 'Absent'
ELSE 'Unknown'
END AS statename
FROM windows_optional_features
WHERE name = 'TFTP';
> Requirement: Tested and it works
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.