[Windows] Windows Server 2016 registry state oval:org.cisecurity:ste:1519 is ambiguous
Chuck-Bohling opened this issue · 2 comments
Chuck-Bohling commented
ste:1519 is used to detect Windows Server 2016. Microsoft has the desktop version "Windows 10 Enterprise 2016 LTSB" which 1519 incorrectly identifies as Server 2016. The regex should probably be changed from "…*2016..." to "...*Server 2016...". That seems to work.
DavidRies commented
Hi @Chuck-Bohling, thank you for this feedback.
@kemanik, it looks like you submitted the last substantive edit to this state:
Do you have any thoughts on this?
-David
Chuck-Bohling commented
It looks like oval:org.cisecurity:ste:6571 will have the same problem. That state is used to detect Windows Server 2019. There's probably a Windows 10 enterprise version with the ProductName "Windows 10 Enterprise 2019 LTSB". That file was committed by @wmunyan.