Port commit from wazuh/wazuh - WMI, WMA APIs Integration for Retrieving Installed Windows Updates #372
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… Windows Updates Merge pull request #26706 from wazuh/enhancement/25766-develop-integration-with-wmi-api-to-retrieve-installed-windows-updates Develop Integration with WMI and WUA APIs to Retrieve Installed Windows Updates
3 tasks
lchico
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This PR introduces the integration of the Wazuh agent with both the WMI and WMA APIs to retrieve a comprehensive list of installed Windows updates. The retrieved update data will seamlessly merge into the existing Syscollector inventory to provide a more complete view of system updates.
I am using the wuapi.h file from Wine 9.20 to retrieve installed or updated hotfixes.
The following libraries were added as they are required for the WMI and WMA APIs:
Note: These libraries were extracted from the Windows SDK - 10.0.22621.0 :
Tests
Validated the integration by cross-referencing retrieved data with Syscollector’s current update inventory.
I tested error handling under various scenarios to confirm robustness.
Compilation of the testing done