Determine if Adobe Type Manager Font Driver is disabled (https://technet.microsoft.com/en-us/library/security/ms15-078):
Query:
select * from registry where path like 'HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows%' AND name = 'DisableATMFD' AND data != '1';Additional Query Info:
Version: 2.2.1
Platform: windows
Interval: 3600
JSON:
{ "queries": { "OpenType_Font_Driver_Vulnerability": { "query" : "select * from registry where path like 'HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows%' AND name = 'DisableATMFD' AND data != '1';", "interval" : "3600", "platform" : "windows", "version": "2.2.1", "description" : "Determine if Adobe Type Manager Font Driver is disabled (https://technet.microsoft.com/en-us/library/security/ms15-078)", "value" : "" } } }