Title
#windows
a

allister

06/28/2022, 6:44 AM
silly me, that 'version' is also at the same registry path as "DisplayVersion"
Noah Talerman

Noah Talerman

06/30/2022, 3:17 PM
Hey Allister, does querying the
registry
table with the DisplayVersion path work? Do you see something like “21H2” ?
a

allister

06/30/2022, 3:23 PM
pardon, that was what I was saying in my inscrutable way (I'm not good at words sometimes) 😅
Noah Talerman

Noah Talerman

06/30/2022, 3:24 PM
Ah, no worries. I was just confirming. Also curious if DisplayVersion returns something like edition + version like “Windows 10 Pro 21H2.” Or, if it just returns “H2"
a

allister

06/30/2022, 3:57 PM
It returns the ‘version’ you'd see in the GUI, 21H2
Noah Talerman

Noah Talerman

06/30/2022, 6:44 PM
What osquery query did you run to get this info?
a

allister

07/01/2022, 1:30 AM
a variation of this, the last part of the path just would be changed to
Display Version
https://osquery.slack.com/archives/C0FHNQ2N6/p1656076744498079