Browse Live Discover and Response Queries by Category
Approved

This query is one you are recommended to read the full content of the post to use. It is not simply a copy and paste query, like others in the forum. It is valuable in the right situation

Examine for a specific driver vendor type and version

Given the recent news about Nvidia GPU driver kernel escalation bugs, I would like to know if it is possible to search for drivers with the following;

Use a variable to examine for a single driver like nvidia.

report the version of the driver.

I think this would be valuable as it would be much less "noisy" than a full driver list that could be hundreds of pages on a large network.  Unfortunately as stated in a previous post I am not a SQL guy and don't have the skills to put this together

Gerald Szakal1

  • SELECT
      device_name,
      device_id,
      version,
      provider,
      manufacturer,
      CAST(datetime(date, 'unixepoch') AS TEXT) AS 'Installed on',
      signed
    FROM drivers
    WHERE manufacturer LIKE 'NVIDIA%'
    ORDER BY device_name = "", device_name, device_id ASC;

  • Hi Gerald,

    Here you go! Just use $$name$$ variable and filter out the driver list as per your need.

    --VARIABLE  name    STRING

SELECT
    device_name,
    device_id,
    service,
    image,
    service_key,
    version,
    inf,
    class,
    provider,
    manufacturer,
    driver_key,
    date,
    signed
FROM drivers
WHERE provider LIKE '$$name$$' OR manufacturer LIKE '$$name$$'
ORDER BY device_name = "", device_name, device_id ASC

  • You can try to search

    SELECT name , version , publisher , install_date  

FROM programs 

WHERE publisher LIKE "%NVIDIA%";
    from the Programs table to check that

Unfiltered HTML