Could you not just write a plugin that issues the following command: Net statistics Server/Workstation <-- choose whichever is relevant
The second line is "Statistics since MM/DD/YYYY M:S", where it shows the last time and date the machine booted. Based on what time and date the patch was pushed out, you should be able to tell whether the machine has rebooted since the patch install. Andrew Court IT Security Specialist | CEH | BT Retail - Ireland | E:[email protected] |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899| www.btireland.com -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Bazy Sent: 09 January 2009 12:10 To: [email protected] Subject: Checking if Windows was restarted after update Hello! We use WSUS in our company for updates, but not everyone restart's his workstation for days. So in some cases the computer is still vulnerable if not restarted. How would be the best practice to check this? I'm using Nessus for about 3 months, read the book but have little experience. Thank you! -- Bazy <[email protected]> _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
