Query
CVE-2025-42701 and CVE-2025-42706 Falcon Version Scoping (OsVersionInfo)
LogScale · Network & Security · v2 · @sebastian · 25.7.2026
The following query looks for Falcon Sensor for Windows versions that need to be hotfixed or updated to address CVE-2025-42701 and CVE-2025-42706. The datasource for this query is the Windows event OsVersionInfo. That event is generated on sensor start, atsystem reboot, and/or every 24-hours.
DetectionEndpointInvestigationNetworkWindows
Query contentv2
Download v2Loading editor…
Version history
Every save keeps the previous content. Open any version to view or download it.