How to create an Alert to find Windows 2003 machine? Also looking to find mobile device OS versions (iOS and Android) etc
you can setup an alarm for each Signatur ID in SIEM that indicates this is a Windows 2003 Server.
43-211#####0 for a Event from a 2003 Server and the #### indicates the EventID from Eventlog. But i think this is a to heavy Alarmsetting.
Yes and No, becaus there are lists but not complete.
And the list in the Database of the SIEM =)
Use "device type" and chose all McAfee devices that would inlcude all Mcafee OS and appliances.