( version of client >= "6.0.0.0" ) AND ( ( existstruewhose ( iftruethen ( exists matches ( regular expression "[TW|WS][0-9]0-[0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]" ) of computer name as lowercase ORexists matches ( regular expression "LT[0-9]0-[0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]" ) of computer name as lowercase ORexists matches ( regular expression "VM[0-9]0-[0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]" ) of computer name as lowercase ORexists matches ( regular expression "VITDC" ) of computer name as lowercase ORexists matches ( regular expression "TESTLABJUMP" ) of computer name as lowercase ORexists matches ( regular expression "SC-01-LOANER" ) of computer name as lowercase ORexists matches ( regular expression "R90" ) of computer name as lowercase ORexists matches ( regular expression "ITEC" ) of computer name as lowercase ORexists matches ( regular expression "ITDC" ) of computer name as lowercase ORexists matches ( regular expression "VITEC" ) of computer name as lowercase ORexists matches ( regular expression "CIOPS" ) of computer name as lowercase ORexists matches ( regular expression "TDC" ) of computer name as lowercase ORexists matches ( regular expression "OSI-" ) of computer name as lowercase ) elsefalse ) ) OR ( existstruewhose ( iftruethen ( exists setting "__Group_0_Legacy-CorpEndPoints"whose ( value ofit is "True" ) of client ) elsefalse ) ) OR ( existstruewhose ( iftruethen ( member of group 372311of site "CustomSite_Computer_Group" ) elsefalse ) ) or ( existstruewhose ( iftruethen ( member of group 358002of site "CustomSite_Computer_Group" ) elsefalse ) ) )
(version of client >= "6.0.0.0") AND ((existstruewhose (iftruethen (exists matches (regular expression "[TW|WS][0-9]0-[0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]") of computer name as lowercase ORexists matches (regular expression "LT[0-9]0-[0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]") of computer name as lowercase ORexists matches (regular expression "VM[0-9]0-[0-9][0-9]-[0-9][0-9][0-9][0-9][0-9]") of computer name as lowercase ORexists matches (regular expression "VITDC") of computer name as lowercase ORexists matches (regular expression "TESTLABJUMP") of computer name as lowercase ORexists matches (regular expression "SC-01-LOANER") of computer name as lowercase ORexists matches (regular expression "R90") of computer name as lowercase ORexists matches (regular expression "ITEC") of computer name as lowercase ORexists matches (regular expression "ITDC") of computer name as lowercase ORexists matches (regular expression "VITEC") of computer name as lowercase ORexists matches (regular expression "CIOPS") of computer name as lowercase ORexists matches (regular expression "TDC") of computer name as lowercase ORexists matches (regular expression "OSI-") of computer name as lowercase) elsefalse)) OR (existstruewhose (iftruethen (exists setting "__Group_0_Legacy-CorpEndPoints"whose (value ofit is "True") of client) elsefalse)) OR (existstruewhose (iftruethen (member of group 372311of site "CustomSite_Computer_Group") elsefalse)) or (existstruewhose (iftruethen (member of group 358002of site "CustomSite_Computer_Group") elsefalse)))
notexists ( itas trimmed string ) whose ( itcontains unique value of dns domainnames of local computers of active directories ) of substrings separated by ","of ( itas string as lowercase ) of values "SearchList"of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"of registries
notexists (itas trimmed string) whose(itcontains unique value of dns domainnames of local computers of active directories) of substrings separated by ","of (itas string as lowercase) of values "SearchList"of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"of registries
unique values of ( concatenations "."of substrings separated by ",DC="of following texts of firsts "DC="ofit ) of active directory paths of bes computers
unique values of (concatenations "."of substrings separated by ",DC="of following texts of firsts "DC="ofit) of active directory paths of bes computers
tuple string items 2of items 1of ( elements of item 0of it, elements of item 1ofit ) whose ( item 0ofitas version >= tuple string item 0of item 1ofitAND item 0ofitas version <= tuple string item 1of item 1ofit ) of ( it, sets of ( concatenations ", "of ( itas trimmed string ) of substrings separated by ","ofit ) of ( "10.10.0.0,10.10.10.255,SubnetTag1"; "192.168.7.1 ,192.168.7.255, SubnetTag2"; "192.168.0.0, 192.168.6.255,SubnetTag3"; "169.254.0.0,169.254.255.255,SelfAssigned" ) ) of sets of ( itas string ) of addresses of adapters of network
tuple string items 2of items 1of (elements of item 0of it, elements of item 1ofit) whose(item 0ofitas version >= tuple string item 0of item 1ofitAND item 0ofitas version <= tuple string item 1of item 1ofit) of ( it, sets of (concatenations ", "of (itas trimmed string) of substrings separated by ","ofit) of ("10.10.0.0,10.10.10.255,SubnetTag1"; "192.168.7.1 ,192.168.7.255, SubnetTag2"; "192.168.0.0, 192.168.6.255,SubnetTag3"; "169.254.0.0,169.254.255.255,SelfAssigned") ) of sets of (itas string) of addresses of adapters of network
computer name, ( ( month ofitas two digits & "/" & day_of_month ofitas two digits & "/" & year ofitas string ) of dates ( local time zone ) of times generated of it, ( time of times ( local time zone ) of times generated ofit ) , concatenation of substrings separated by "%0d%0a"of ( preceding text of first "%0d%0a"of following text of last "Account Name:%09%09"ofit ) of ( descriptions ofit ) ) of records whose ( event id ofit=4740and now - time generated ofit < 1*day ) of ( security event log )
computer name, ((month ofitas two digits & "/" & day_of_month ofitas two digits & "/" & year ofitas string) of dates (local time zone) of times generated of it, (time of times (local time zone) of times generated ofit), concatenation of substrings separated by "%0d%0a"of (preceding text of first "%0d%0a"of following text of last "Account Name:%09%09"ofit) of (descriptions ofit)) of records whose (event id ofit=4740and now - time generated ofit < 1*day) of (security event log)
( multiplicity of it, it ) of unique values of names whose ( itstartswith"__Client_Role_" ) of client settings whose ( value ofitas string ="1" ) of bes computers
(multiplicity of it, it) of unique values of names whose (itstartswith"__Client_Role_" ) of client settings whose (value ofitas string ="1") of bes computers
number of bes fixlets whose ( not custom flag ofitAND download size ofit!=0AND now - modification time ofit < 90 * day ANDexists applicable computers ofitANDexists scripts whose ( itas lowercase contains"prefetch" ) of actions ofit )
number of bes fixlets whose(not custom flag ofitAND download size ofit!=0AND now - modification time ofit < 90 * day ANDexists applicable computers ofitANDexists scripts whose(itas lowercase contains"prefetch") of actions ofit)
( item 0ofit & item 1ofit ) of ( "Y::site=" & name of site ofit & "::fixletid=" & id ofitas string & "::url=",
(
item 0 of it & "::size=" & item 1ofit & "::hash=" & item 2ofit & "::hashtype=sha256" ) whose ( length ofit > 64ANDitas uppercase does not contain "_CACHING_REQUIRED" ) of ( parenthesized parts 3of it, parenthesized parts 2of it, parenthesized parts 4ofit ) of matches ( regex "(prefetch \S+ sha1:\S{40} size:(\d+) (https*:\/\/\S+) sha256:(\S{64})|\s*add prefetch item name=\S+ sha1=\S{40} size=(\d+) url=(https*:\/\/\S+) sha256=(\S{64}))" ) of scripts of actions ofit ) of bes fixlets whose ( not custom flag ofitAND download size ofit!=0AND now - modification time ofit < 90 * day ANDexists applicable computers ofitANDexists scripts whose ( itas lowercase contains"prefetch" ) of actions ofit )
(item 0ofit & item 1ofit) of ("Y::site=" & name of site ofit & "::fixletid=" & id ofitas string & "::url=", (item 0 of it & "::size=" & item 1ofit & "::hash=" & item 2ofit & "::hashtype=sha256") whose(length ofit > 64ANDitas uppercase does not contain "_CACHING_REQUIRED") of (parenthesized parts 3of it, parenthesized parts 2of it, parenthesized parts 4ofit) of matches (regex "(prefetch \S+ sha1:\S{40} size:(\d+) (https*:\/\/\S+) sha256:(\S{64})|\s*add prefetch item name=\S+ sha1=\S{40} size=(\d+) url=(https*:\/\/\S+) sha256=(\S{64}))") of scripts of actions ofit) of bes fixlets whose(not custom flag ofitAND download size ofit!=0AND now - modification time ofit < 90 * day ANDexists applicable computers ofitANDexists scripts whose(itas lowercase contains"prefetch") of actions ofit)
if ( exists property "cloud provider" ) then ( if ( exists private ip of cloud provider ) then private ip of cloud provider else nothing ) else nothing
if (exists property "cloud provider") then (if (exists private ip of cloud provider) then private ip of cloud provider else nothing) else nothing
if ( exists property "cloud provider" ) then ( if ( exists name whose ( itcontains"Azure" ) of cloud provider ) then ( if ( exists path "$.network.interface[0].ipv4.subnet[0].address"ofit ) then ( path "$.network.interface[0].ipv4.subnet[0].address"ofit ) else nothing ) of ( json of instance data of cloud provider ) else nothing ) else nothing
if (exists property "cloud provider") then (if (exists name whose (itcontains"Azure") of cloud provider) then (if (exists path "$.network.interface[0].ipv4.subnet[0].address"ofit) then (path "$.network.interface[0].ipv4.subnet[0].address"ofit) else nothing) of (json of instance data of cloud provider) else nothing) else nothing
if ( ( exists setting "BigFix_Custom_Serial"of client ) and ( exists value of setting "BigFix_Custom_Serial"of client ) ) then value of setting "BigFix_Custom_Serial"of client else ( ifexists property "hardware"then serial of hardware as string else ( if ( name of operating system as lowercase startswith"mac" ) then ( string "IOPlatformSerialNumber"of dictionary of service plane of iokit registry ) else ( if ( name of operating system as lowercase startswith"win" ) then ( if ( exists folder ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of regapp "besclient.exe" ) ) & "\LMT\CIT\tlm_hw_scans" ) ) then ( unique values of ( itas text ) of ( xpaths "Hardware/ComponentID/SerialNumber"of xml documents of files whose ( name ofitas lowercase contains"tlm_hw_"and modification time ofit= ( maximum of modification times of files of folder ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of regapp "besclient.exe" ) ) & "\LMT\CIT\tlm_hw_scans\" ) ) ) of folders ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of regapp "besclient.exe" ) ) & "\LMT\CIT\tlm_hw_scans\" ) ) ) else"Not supported: use BigFix_Custom_Serial Computer Property to set serial" ) else ( if ( exists folder ( ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of parent folder of client folder of site "actionsite" ) ) ) & "/LMT/CIT/tlm_hw_scans/" ) ) then ( ifexists property "xml document"then ( unique values of ( itas text ) of ( xpaths "Hardware/ComponentID/SerialNumber"of xml documents of files whose ( name ofitas lowercase contains"tlm_hw_"and modification time ofit= ( maximum of modification times of files of folder ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of parent folder of client folder of site "actionsite" ) ) & "/LMT/CIT/tlm_hw_scans" ) ) ) of folders ( ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of parent folder of client folder of site "actionsite" ) ) ) & "/LMT/CIT/tlm_hw_scans/" ) ) ) else ( unique values of ( following texts of lasts ">"of preceding texts of lasts "<"of lines containing "<SerialNumber>"whose ( line number ofit < 15 ) of files whose ( name ofitas lowercase contains"tlm_hw_"and modification time ofit= ( maximum of modification times of files of folder ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of parent folder of client folder of site "actionsite" ) ) & "/LMT/CIT/tlm_hw_scans" ) ) ) of folders ( ( ( if ( version of client >= "9"as version ) then ( pathname of parent folder of data folder of client ) else ( pathname of parent folder of parent folder of client folder of site "actionsite" ) ) ) & "/LMT/CIT/tlm_hw_scans/" ) ) ) ) else"Not supported: use BigFix_Custom_Serial Computer Property to set serial" ) ) ) )
if ((exists setting "BigFix_Custom_Serial"of client) and (exists value of setting "BigFix_Custom_Serial"of client)) then value of setting "BigFix_Custom_Serial"of client else ( ifexists property "hardware"then serial of hardware as string else ( if(name of operating system as lowercase startswith"mac") then (string "IOPlatformSerialNumber"of dictionary of service plane of iokit registry)else(if(name of operating system as lowercase startswith"win")then(if(exists folder((if(version of client >= "9"as version)then(pathname of parent folder of data folder of client)else(pathname of parent folder of regapp "besclient.exe"))& "\LMT\CIT\tlm_hw_scans"))then(unique values of(itas text)of(xpaths "Hardware/ComponentID/SerialNumber"of xml documents of files whose(name ofitas lowercase contains"tlm_hw_"and modification time ofit= (maximum of modification times of files of folder((if(version of client >= "9"as version) then(pathname of parent folder of data folder of client) else (pathname of parent folder of regapp "besclient.exe")) & "\LMT\CIT\tlm_hw_scans\")))of folders((if(version of client >= "9"as version)then(pathname of parent folder of data folder of client)else(pathname of parent folder of regapp "besclient.exe"))& "\LMT\CIT\tlm_hw_scans\")))else"Not supported: use BigFix_Custom_Serial Computer Property to set serial")else(if(exists folder(((if(version of client >= "9"as version)then(pathname of parent folder of data folder of client)else(pathname of parent folder of parent folder of client folder of site "actionsite")))& "/LMT/CIT/tlm_hw_scans/"))then(ifexists property "xml document"then(unique values of(itas text)of(xpaths "Hardware/ComponentID/SerialNumber"of xml documents of files whose(name ofitas lowercase contains"tlm_hw_"and modification time ofit= (maximum of modification times of files of folder((if (version of client >= "9"as version) then (pathname of parent folder of data folder of client) else (pathname of parent folder of parent folder of client folder of site "actionsite")) & "/LMT/CIT/tlm_hw_scans")))of folders(((if(version of client >= "9"as version)then(pathname of parent folder of data folder of client)else(pathname of parent folder of parent folder of client folder of site "actionsite")))& "/LMT/CIT/tlm_hw_scans/")))else(unique values of(following texts of lasts ">"of preceding texts of lasts "<"of lines containing "<SerialNumber>"whose(line number ofit < 15)of files whose(name ofitas lowercase contains"tlm_hw_"and modification time ofit= (maximum of modification times of files of folder((if (version of client >= "9"as version) then (pathname of parent folder of data folder of client) else (pathname of parent folder of parent folder of client folder of site "actionsite")) & "/LMT/CIT/tlm_hw_scans")))of folders(((if(version of client >= "9"as version)then(pathname of parent folder of data folder of client)else(pathname of parent folder of parent folder of client folder of site "actionsite")))& "/LMT/CIT/tlm_hw_scans/")))) else"Not supported: use BigFix_Custom_Serial Computer Property to set serial") ) ))
if ( exists dns domainnames of local computers of active directories ) then ( dns domainnames of local computers of active directories ) else"non domain joined"
if (exists dns domainnames of local computers of active directories) then (dns domainnames of local computers of active directories) else"non domain joined"
exists ( current date - it ) whose ( it > 60 * day ) of ( itas date ) of values of headers "X-Fixlet-Source-Release-Date"of relevant fixlets whose ( exists values whose ( itcontains"Critical"oritcontains"Important" ) of headers "X-Fixlet-Source-Severity"ofit ) of sites whose ( "Fixlet Site"= type ofitAND"Enterprise Security"= name ofit )
exists (current date - it) whose(it > 60 * day) of (itas date) of values of headers "X-Fixlet-Source-Release-Date"of relevant fixlets whose(exists values whose(itcontains"Critical"oritcontains"Important") of headers "X-Fixlet-Source-Severity"ofit) of sites whose("Fixlet Site"= type ofitAND"Enterprise Security"= name ofit)
( itas integer ) of preceding texts of firsts ".fxf"of following texts of firsts "Group "of names of files whose ( name ofitstartswith"Group"and name ofit ends with".fxf" ) of folders of data folders of client
(itas integer) of preceding texts of firsts ".fxf"of following texts of firsts "Group "of names of files whose(name ofitstartswith"Group"and name ofit ends with".fxf") of folders of data folders of client
unique values of ( itas trimmed string ) of following texts of firsts "Subject: "of lines containing "Subject: "of files whose ( name ofitstartswith"Group"and name ofit ends with".fxf" ) of folders of data folders of client
unique values of (itas trimmed string) of following texts of firsts "Subject: "of lines containing "Subject: "of files whose(name ofitstartswith"Group"and name ofit ends with".fxf") of folders of data folders of client