Привет! Помоги с написанием PDQL запроса для Max Patrol VM.
ВОТ ПРИМЕР РАБОЧЕГО ЗАПРОСА 
select(@Host, Host.@Vulners, Host.@Vulners.Description, Host.@Vulners.CVSS3BaseScore, Host.@Vulners.status, Host.@Vulners.severityrating, Host.@VULNERS.DISCOVERYTIME, Host.@VULNERS.DueTime, Host.@VULNERS.LASTFIXTIME, Host.@UpdateTime, Host.@Vulners.HowToFix, Host.@VULNERS.TAGS, Host.@Vulners.Patch.DisplayName as Patch, Host.@Vulners.Patch.PatchType as PatchType, Host.@Vulners.Patch.PatchLink as PatchLink, Host.Softs.Name as SoftwareName, Host.Softs.Version as SoftwareVersion, Host.Softs.@Vulners.VulnerableEntity.Path as SoftwarePath, Host.@Vulners.VulnerableEntity.Name as VulnerableEntity, Host.@VULNERS.ISTREND, Host.@VULNERS.METRICS.EXPLOITABLE, Host.@VULNERS.METRICS.HASNETWORKATTACKVECTOR) | filter(Host.@Vulners and Host.@Vulners.Status != 'fixed' and Host.@Vulners and Host.@Vulners.Status != 'excluded') | join(select(Host.Softs.@Vulners.id, Host.Softs, Host.Softs.InstallPath) as WinSofts, Host.@VULNERS.ID = WinSofts.Host.Softs.@Vulners.id) | join(select(UnixHost.Packages.@NodeVulners.ID, UnixHost.Packages) as UnixSofts, Host.@VULNERS.ID = UnixSofts.UnixHost.Packages.@NodeVulners.ID) | join(select(Host.Endpoints<TransportEndpoint>.@Vulners.ID, Host.Endpoints<TransportEndpoint>.Service, Host.Endpoints<TransportEndpoint>) as PortVuln, Host.@VULNERS.ID = PortVuln.Host.Endpoints<TransportEndpoint>.@Vulners.ID) | join(select(Host.@VULNERS.ID, Host.@VULNERS.IDS) | filter(Host.@VULNERS.IDS LIKE 'CVE%') as CVE, Host.@VULNERS.ID = CVE.Host.@VULNERS.ID) | join(select(Host.@VULNERS.ID, Host.@VULNERS.IDS) | filter(Host.@VULNERS.IDS LIKE 'BDU%') as BDU, Host.@VULNERS.ID = BDU.Host.@VULNERS.ID) | join(select(Host.@VULNERS.ID, Host.@VULNERS.IDS) | filter(Host.@VULNERS.IDS LIKE 'MP%') as MP, Host.@VULNERS.ID = MP.Host.@VULNERS.ID) | calc(WinSofts.Host.Softs + ' Путь установки или версия и имя пакета: ' + WinSofts.Host.Softs.InstallPath + UnixSofts.UnixHost.Packages as WinANDUnixSoftsHowToFix) | filter(Host.@Vulners.severityrating = 'critical' 
    or (Host.@Vulners.severityrating = 'high' and Host.@VULNERS.ISTREND = true)
    or (Host.@Vulners.severityrating = 'medium' and Host.@VULNERS.ISTREND = true)
    or (Host.@Vulners.severityrating = 'high' and Host.@VULNERS.METRICS.EXPLOITABLE = true)
    or (Host.@Vulners.severityrating = 'medium' and Host.@VULNERS.METRICS.EXPLOITABLE = true)
    or (Host.@Vulners.severityrating = 'high' and PortVuln.Host.Endpoints<TransportEndpoint>.Service != null)

alec, [20.11.2024 11:43]
or (Host.@Vulners.severityrating = 'high' and PortVuln.Host.Endpoints<TransportEndpoint> != null)) | select(CVE.Host.@VULNERS.IDS.DisplayName, @Host, Host.@VULNERS.DueTime, VulnerableEntity, Host.@Vulners.severityrating, PatchLink, Patch, PatchType, WinANDUnixSoftsHowToFix, Host.@Vulners.HowToFix, WinSofts.Host.Softs, WinSofts.Host.Softs.InstallPath, UnixSofts.UnixHost.Packages, PortVuln.Host.Endpoints<TransportEndpoint>.Service, PortVuln.Host.Endpoints<TransportEndpoint>, SoftwareName, SoftwareVersion, SoftwarePath, Host.@VULNERS.ISTREND, Host.@VULNERS.METRICS.EXPLOITABLE, Host.@VULNERS.METRICS.HASNETWORKATTACKVECTOR) | sort(PortVuln.Host.Endpoints<TransportEndpoint> DESC)


Напиши запрос для поиска хостов с уязвимостью CVE-2024-10979

alec, [20.11.2024 11:46]
БУДЬ ВНИМАТЕЛЕН! ВОТ ПРИМЕР РАБОЧЕГО ЗАПРОСА! НА ЕГО ОСНОВЕ НАПИШИ МНЕ ЗАПРОС ДЛЯ ПОИСКА НУЖНРОЙ УЯЗВИМОСТИ ВНЕИМАТЕЛЬНННОО
select(@Host, Host.@Vulners, Host.@Vulners.Description, Host.@Vulners.CVSS3BaseScore, Host.@Vulners.status, Host.@Vulners.severityrating, Host.@VULNERS.DISCOVERYTIME, Host.@VULNERS.DueTime, Host.@VULNERS.LASTFIXTIME, Host.@UpdateTime, Host.@Vulners.HowToFix, Host.@VULNERS.TAGS, Host.@Vulners.Patch.DisplayName as Patch, Host.@Vulners.Patch.PatchType as PatchType, Host.@Vulners.Patch.PatchLink as PatchLink, Host.Softs.Name as SoftwareName, Host.Softs.Version as SoftwareVersion, Host.Softs.@Vulners.VulnerableEntity.Path as SoftwarePath, Host.@Vulners.VulnerableEntity.Name as VulnerableEntity, Host.@VULNERS.ISTREND, Host.@VULNERS.METRICS.EXPLOITABLE, Host.@VULNERS.METRICS.HASNETWORKATTACKVECTOR) | filter(Host.@Vulners and Host.@Vulners.Status != 'fixed' and Host.@Vulners and Host.@Vulners.Status != 'excluded') | join(select(Host.Softs.@Vulners.id, Host.Softs, Host.Softs.InstallPath) as WinSofts, Host.@VULNERS.ID = WinSofts.Host.Softs.@Vulners.id) | join(select(UnixHost.Packages.@NodeVulners.ID, UnixHost.Packages) as UnixSofts, Host.@VULNERS.ID = UnixSofts.UnixHost.Packages.@NodeVulners.ID) | join(select(Host.Endpoints<TransportEndpoint>.@Vulners.ID, Host.Endpoints<TransportEndpoint>.Service, Host.Endpoints<TransportEndpoint>) as PortVuln, Host.@VULNERS.ID = PortVuln.Host.Endpoints<TransportEndpoint>.@Vulners.ID) | join(select(Host.@VULNERS.ID, Host.@VULNERS.IDS) | filter(Host.@VULNERS.IDS LIKE 'CVE%') as CVE, Host.@VULNERS.ID = CVE.Host.@VULNERS.ID) | join(select(Host.@VULNERS.ID, Host.@VULNERS.IDS) | filter(Host.@VULNERS.IDS LIKE 'BDU%') as BDU, Host.@VULNERS.ID = BDU.Host.@VULNERS.ID) | join(select(Host.@VULNERS.ID, Host.@VULNERS.IDS) | filter(Host.@VULNERS.IDS LIKE 'MP%') as MP, Host.@VULNERS.ID = MP.Host.@VULNERS.ID) | calc(WinSofts.Host.Softs + ' Путь установки или версия и имя пакета: ' + WinSofts.Host.Softs.InstallPath + UnixSofts.UnixHost.Packages as WinANDUnixSoftsHowToFix) | filter(Host.@Vulners.severityrating = 'critical' 
    or (Host.@Vulners.severityrating = 'high' and Host.@VULNERS.ISTREND = true)
    or (Host.@Vulners.severityrating = 'medium' and Host.@VULNERS.ISTREND = true)
    or (Host.@Vulners.severityrating = 'high' and Host.@VULNERS.METRICS.EXPLOITABLE = true)
    or (Host.@Vulners.severityrating = 'medium' and Host.@VULNERS.METRICS.EXPLOITABLE = true)
    or (Host.@Vulners.severityrating = 'high' and PortVuln.Host.Endpoints<TransportEndpoint>.Service != null)
or (Host.@Vulners.severityrating = 'high' and PortVuln.Host.Endpoints<TransportEndpoint> != null)) | select(CVE.Host.@VULNERS.IDS.DisplayName, @Host, Host.@VULNERS.DueTime, VulnerableEntity, Host.@Vulners.severityrating, PatchLink, Patch, PatchType, WinANDUnixSoftsHowToFix, Host.@Vulners.HowToFix, WinSofts.Host.Softs, WinSofts.Host.Softs.InstallPath, UnixSofts.UnixHost.Packages, PortVuln.Host.Endpoints<TransportEndpoint>.Service, PortVuln.Host.Endpoints<TransportEndpoint>, SoftwareName, SoftwareVersion, SoftwarePath, Host.@VULNERS.ISTREND, Host.@VULNERS.METRICS.EXPLOITABLE, Host.@VULNERS.METRICS.HASNETWORKATTACKVECTOR) | sort(PortVuln.Host.Endpoints<TransportEndpoint> DESC)


Напиши запрос для поиска хостов с уязвимостью CVE-2024-10979