Use SCCM 2012 Configuration Baselines to find Spectre / Meltdown Vulnerabilities with GameBoyHorror!

gbh

This will be a very brief post, as there is not much to explain.

SCCM 2012 administrators should know how to create configuration items and baselines, so simply plug in the code from my fork of burntmacncheese’s project and make sure you set compliance settings to look for “Success.” as the output of the script, any other result being non-compliant.

This version ONLY checks to see if a workstation or server has applied 2018-01-09 updates to mitigate the vulnerability risk at the OS level. Feel free to fork / bork it to check for full mitigation at the hardware level.

https://github.com/b3b0/GameBoyHorror

Have fun specter hunting!

-b3b0πŸ§πŸ’»πŸ”‘