LogScale Queries

Query

CVE-2025-42701 and CVE-2025-42706 Falcon Version Scoping (OsVersionInfo)

LogScale · Network & Security · v2 · @sebastian · 25.7.2026

All Queries

The following query looks for Falcon Sensor for Windows versions that need to be hotfixed or updated to address CVE-2025-42701 and CVE-2025-42706. The datasource for this query is the Windows event OsVersionInfo. That event is generated on sensor start, atsystem reboot, and/or every 24-hours.

DetectionEndpointInvestigationNetworkWindows

Query contentv2

Download v2
Loading editor…

Version history

Every save keeps the previous content. Open any version to view or download it.

  1. v2current

    25.7.2026, 10:15:55

  2. v1

    24.7.2026, 18:51:02