pending_windows_updates_patch

Pending windows updates/patches

SCHEMA

hotfix_id	string	The kb article ID for the update
installed	string	Is the update installed
mandatory	string	Is the update mandatory
msrc_severity	string	Severity of the update
size	long	Size of the update
support_url	string	Support URL provided in the update
title	string	Title of the update

-- pending_windows_updates_patch INFO
SELECT 
   -- Device ID DETAILS
   meta_hostname, meta_ip_address, 

   -- Query Details
   query_name, hotfix_id, installed, mandatory, msrc_severity,
   size, support_url, title,

   -- Decoration 
   meta_boot_time, meta_eid, meta_endpoint_type, 
   meta_ip_mask, meta_mac_address, meta_os_name, meta_os_platform, meta_os_type,
   meta_os_version, meta_public_ip, meta_query_pack_version, meta_username,

   --- Generic
   calendar_time, counter, epoch, host_identifier, numerics
   osquery_action, unix_time,

   -- Data Lake
   customer_id, endpoint_id, upload_size

FROM xdr_data
WHERE query_name = 'pending_windows_updates_patch'

Can someone with a pending patch update on windows test?

Thanks

Karl_Ackerman