Home

Search for Windows Patches and Assets

Use the search tokens below to search for patches. Looking for help with writing your query? click here

This is a non searchable file containing all tokens for Patches and Assets copied from the respective token files. Any updates to the Patches and Assets token files should be done here too. This file is used for the dual-search functionality on the UI for Patches and Assets.

Patch tokens

patch.appFamilypatch.appFamily

Use values within quotes or backticks to find patches belonging to certain applications.

Examples

Find patches for SQL Server

patch.appFamily: SQL Server

Find patches that contain parts of the application name

patch.appFamily: "SQL Server 2017 Express Edition"

Find patches that match exact value

patch.appFamily: `SQL Server 2017`

patch.architecturepatch.architecture

Use a text value ##### to find patches applied to a certain architecture (x86, x64).

Example

Find patches for x64

patch.architecture: x64

patch.bulletinpatch.bulletin

Use a text value ##### to find patches with certain bulletin name.

Example

Find patches related to bulletin

patch.bulletin: MS-17-NET-04

patch.categorypatch.category

Use a text value ##### to find patches of certain category (Security Patches, Software Distribution, Security Tools, Non-security Patches, Custom Actions).

Example

Show patches of category Security Patches

patch.category: `Security Patches`

patch.cveIdpatch.cveId

Use a text value ##### to find patches by certain CVE ID.

Example

Find patches for this CVE ID

patch.cveId: CVE-208-0760

patch.downloadMethodpatch.downloadMethod

Use a text value ##### to find patches by certain download method (Automatic, Unavailable, AcquireFromVendor).

- Automatic - Patch downloadable via the Cloud Agent (Qualys Patchable: Yes)

- AcquireFromVendor - Patch must be acquired from the vendor and installed manually (Qualys Patchable: No)

- Unavailable - Patch download information is not available (Qualys Patchable: No)

Example

Find unavailable patches

patch.downloadMethod: unavailable

patch.isEnabledVendorAcquiredPatchespatch.isEnabledVendorAcquiredPatches

Use the values true | false to find vendor-acquired patches that are enabled

Example

Show vendor-acquired patches that are enabled

patch.isEnabledVendorAcquiredPatches: true

patch.isEsuPatchpatch.isEsuPatch

Use the values true | false to find the Extended Security Update (ESU) patches.

Examples

Show a list of ESU patches.

patch.isEsuPatch: true

Show a list of non-ESU patches.

patch.isEsuPatch: false

patch.isRollbackpatch.isRollback

Use the values true | false to find patches which are rolled back.

Example

Show rolled back patches

patch.isRollback: true

patch.isSecuritypatch.isSecurity

Use the values true | false to find patches of type Security.

Example

Show security patches

patch.isSecurity: true

patch.kbpatch.kb

Use a text value ##### to find patches with KB number issued by Microsoft for individual patch (Microsoft only).

Example

Find patches related to KB number

patch.kb: KB401572

patch.updatedDatepatch.updatedDate

Use a date range or specific date to find when patches were last modified.

Examples

Show patches modified within certain dates

patch.updatedDate: [2018-02-01 ... 2018-02-12]

Show patches modified starting 2018-02-01, ending 1 month ago

patch.updatedDate: [2018-02-01 ... now-1M]

Show patches modified starting 2 weeks ago, ending 1 second ago

patch.updatedDate: [now-2w ... now-1s]

Show patches modified on certain date

patch.updatedDate:'2018-02-22'

patch.idpatch.id

Use a text value ##### to find patches by patch ID.

Example

Find patches with this ID

patch.id: 8fc0797d-2c7b-3c08-8e7b-48c30585a702

patch.productpatch.product

Use values within quotes or backticks to find products affected by a patch.

Examples

Find products related to name

patch.product: Internet Explorer

Find products that contain parts of name

patch.product: "Update for Internet Explorer 11 for Windows 8.1;

Find products that match exact value

patch.product: `Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB2901549)`

patch.publishedDatepatch.publishedDate

Use a date range or specific date to find when patches were last published.

Examples

Show patches published within certain dates

patch.publishedDate: [2018-02-01 ... 2018-02-12]

Show patches published starting 2018-02-01, ending 1 month ago

patch.publishedDate: [2018-02-01 ... now-1M]

Show patches published starting 2 weeks ago, ending 1 second ago

patch.publishedDate: [now-2w ... now-1s]

Show patches published on certain date

patch.publishedDate:'2018-02-22'

patch.qidpatch.qid

Use a text value ##### to find patches by certain QID.

Example

Find patches for this QID

patch.qid: 3015321

patch.isRebootRequiredpatch.isRebootRequired

Use the values true | false to find patches that require reboot.

Example

Show patches where reboot is required

patch.isRebootRequired: true

patch.supersededBypatch.supersededBy

Use a text value ##### to find patches that are superseded by other patch (patch ID).

Example

Find patches that are superseded by this patch

patch.supersededBy: 8fc0797d-2c7b-3c08-8e7b-48c30585a702

patch.supersedespatch.supersedes

Use a text value ##### to find patches that supersede other patch (patch ID).

Example

Find patches that supersede this patch

patch.supersedes: 8fc0797d-2c7b-3c08-8e7b-48c30585a702

patch.typepatch.type

Use a text value ##### to find patches of certain type (OS, Application).

Example

Show patches of type Application

patch.type: "Application"

patch.vendorpatch.vendor

Use values within quotes or backticks to find patches from a certain vendor.

Examples

Find patches related to vendor name

patch.vendor: Microsoft

Find patches that contain parts of vendor name

patch.vendor: "Microsoft Corporation"

Find patches that match exact value

patch.vendor: `Microsoft`

patch.vendorSeveritypatch.vendorSeverity

Use a text value ##### to find patches with certain vendor assigned severity level (Critical, Important, Moderate, Low, None).

Example

Find patches with this vendor assigned severity level

patch.vendorSeverity: Critical

patch.titlepatch.title

Use values within quotes or backticks to find patches with certain title.

Examples

Find patches related to title

patch.title: Security

Find patches that contain parts of title

patch.title: "Security and Quality Rollup for the .Net Framework"

Find patches that match exact value

patch.title: `Security for the .Net Framework`

 

Asset tokens

agent.idagent.id

Use a text value ##### to find an agent with a certain ID.

Example

Show findings for this agent ID

agent.id:f0c8e682-e9cc-4e7d-b92a-0c905d81ec74

sensor.activatedForModulessensor.activatedForModules

Use the values MTG | PM | ISL to find assets that are activated for the Patch Management,  Mitigation or Isolation module.

Examples

Show assets activated for the Mitigation module.

sensor.activatedForModules: MTG

Show assets activated for the Patch Management module.

sensor.activatedForModules: PM

Show assets activated for the Isolation module.

sensor.activatedForModules: ISL

asset.isIsolatedasset.isIsolated

Use the value True or False to find the isolated and non-isolated assets.   

Examples

Show assets that are isolated

asset.isIsolated: true

Show assets that are not isolated

asset.isIsolated: false

asset.installedCountasset.installedCount

Use an integer value ##### to help you find assets on the basis of number of installed patches.

Example

Show assets where number of installed patches is less than 50

asset.installedCount < 50

asset.lastLoggedOnUserasset.lastLoggedOnUser

Use a text value ##### to help you find assets last logged into by a user of interest.

Examples

Show assets last logged into by this user

asset.lastLoggedOnUser:.\Administrator

asset.isLicensedasset.isLicensed

Use the values true | false to find assets that are using Patch Management licenses.

Example

Show assets licensed for Patch Management

asset.isLicensed: true

asset.missingCountasset.missingCount

Use an integer value ##### to help you find assets on the basis of number of missing patches.

Example

Show assets where number of missing patches is more than 50

missingCount > 50

asset.nameasset.name

Use a text value ##### to a specific asset name.

Example

Show findings with this asset name

asset.name:WIN7PATCH69-85

asset.netbiosNameasset.netbiosName

Use a text value ##### to define the NetBIOS name you're interested in.

Examples

Show asset with this NetBIOS name

asset.netbiosName:VISTASP2-24-208

operatingSystem.nameoperatingSystem.name

Use values within quotes or backticks to help you find the operating system you're looking for.

Examples

Show any findings with this OS name

operatingSystem.name:Windows

Show any findings that contain components of OS name

operatingSystem.name:"Windows 2008 r2 service pack 2"

Show any findings that match exact value "Windows 2012"

operatingSystem.name:`Windows 2008`

asset.isPendingRebootasset.isPendingReboot

Use the values true | false to find assets that need a reboot.

Example

Show assets where reboot is pending

asset.isPendingReboot: true

asset.scanDateTimeasset.scanDateTime

Use a date range or specific date to define when assets were last scanned.

Examples

Show scan date within certain date range

asset.scanDateTime:[2018-08-01 ... 2018-09-10]

Show scan date beginning 2018-06-15, ending 1 month ago

asset.scanDateTime:[2018-06-15 ... now-1M]

Show scan date beginning 2 weeks ago, ending 1 second ago

asset.scanDateTime:[now-2w ... now-1s]

Show scan date on a specific date

asset.scanDateTime:'2018-09-12'

asset.statusDateTimeasset.statusDateTime

Use a date range or specific date to define when asset status was last updated.

Examples

Show status updated within certain date range

asset.statusDateTime:[2018-08-01 ... 2018-09-10]

Show status updated beginning 2018-06-15, ending 1 month ago

asset.statusDateTime:[2018-06-15 ... now-1M]

Show status updated beginning 2 weeks ago, ending 1 second ago

asset.statusDateTime:[now-2w ... now-1s]

Show status updated on a specific date

asset.statusDateTime:'2018-09-12'

asset.statusasset.status

Use a text value ##### to find assets with certain scan status returned from last scan.

Example

Show assets with this scan status

asset.status:Enabled

asset.lastRebootDateasset.lastRebootDate

Use a date range or specific date to define when assets were last rebooted.

Examples

Show assets last rebooted within certain dates

asset.lastRebootDate:[2018-08-01 ... 2018-09-10]

Show assets last rebooted starting 2018-06-15, ending 1 month ago

asset.lastRebootDate:[2018-06-15 ... now-1M]

Show assets last rebooted starting 2 weeks ago, ending 1 second ago

asset.lastRebootDate:[now-2w ... now-1s]

Show assets last rebooted on a specific date

asset.lastRebootDate:'2018-09-12'

asset.timezoneasset.timezone

Use a text value ##### to find assets in a certain timezone.

Example

Find assets in this timezone

asset.timezone:"-08:00"

asset.tag.idasset.tag.id

Use a text value ##### to find an asset tag ID.

Examples

Find patches that match exact value

asset.tag.id:`79eb654f-6eca-4922-9adf-0d39bd7cf3f2`

asset.tag.nameasset.tag.name

Use values within quotes or backticks to help you find the asset tag name you're looking for.

Examples

Show any findings related to this tag name

asset.tag.name:Cloud Agent

Show any findings that contain parts of tag name

asset.tag.name:"Cloud Agent"

Show any findings that match exact value "Cloud Agent"

asset.tag.name:`Cloud Agent`

asset.interface.addressasset.interface.address

Use values to find the IP addresses you are looking for.

Examples

Show the exact match of the IP address

asset.interface.address:`10.113.226.87`

Show any findings that contain parts of the IP address

asset.interface.address:"10.0"

asset.interface.address:10.0

hardware.modelhardware.model

Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.

Examples

Find jobs related to model name

hardware.model: VMWare

Find jobs that contain parts of model name

hardware.model: "VMWare Virtual Platform"

Find jobs that match exact value

hardware.model: `VMware vSphere 4.0 ESXi`

hardware.manufacturerhardware.manufacturer

Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.

Examples

Find jobs related to manufacturer name

hardware.manufacturer: VMware, Inc

Find jobs that contain parts of manufacturer name

hardware.manufacturer: "VMware, Inc"

Find jobs that match exact value

hardware.manufacturer: `VMware, Inc.`