<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2015-09-03T09:40:04.684-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:5525" version="3" class="inventory">
      <metadata>
        <title>WMI support is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:wmi"/>
        <description>Test if this OS should support WMI service. Note: different Objects are
          supported on different OS. This is a generic test for the API.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-06-05T11:19:56.000-04:00">
              <contributor organization="Lumension Security, Inc.">Ken Lassesen</contributor>
            </submitted>
            <status_change date="2008-06-05T17:17:43.909-04:00">DRAFT</status_change>
            <modified comment="Changed the NT 4.0 criterion from a test to an extended definition reference" date="2008-06-09T11:17:00.073-04:00">
              <contributor organization="The MITRE Corporation">Bryan Worrell</contributor>
            </modified>
            <status_change date="2008-06-30T04:00:16.173-04:00">INTERIM</status_change>
            <status_change date="2008-07-21T04:00:16.262-04:00">ACCEPTED</status_change>
            <modified comment="Removed duplicate criteria for Windows Server 2008" date="2009-05-07T10:29:00.217-04:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-05-07T10:32:25.268-04:00">INTERIM</status_change>
            <modified comment="Corrected Windows NT platform" date="2009-05-25T10:32:00.713-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-15T04:00:42.986-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Windows NT is installed" definition_ref="oval:org.mitre.oval:def:36"/>
        <extend_definition comment="Microsoft Windows Server 2008 (32-bit) is installed" definition_ref="oval:org.mitre.oval:def:4870"/>
        <extend_definition comment="Microsoft Windows Server 2008 x64 Edition is installed" definition_ref="oval:org.mitre.oval:def:5356"/>
        <extend_definition comment="Microsoft Windows XP is installed" definition_ref="oval:org.mitre.oval:def:105"/>
        <extend_definition comment="Microsoft Windows Vista is installed" definition_ref="oval:org.mitre.oval:def:228"/>
        <extend_definition comment="Microsoft Windows Server 2003 is installed" definition_ref="oval:org.mitre.oval:def:128"/>
        <extend_definition comment="Microsoft Windows 2000 SP4 or later is installed" definition_ref="oval:org.mitre.oval:def:229"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5356" version="8" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2008 (64-bit) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:::x64"/>
        <description>The operating system installed on the system is Microsoft Windows Server 2008
          (64-bit)</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-26T10:44:02">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-03-26T16:27:25.493-04:00">DRAFT</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.340-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:21.761-04:00">INTERIM</status_change>
            <status_change date="2008-05-12T04:00:15.160-04:00">ACCEPTED</status_change>
            <modified comment="Changed registry check for amd64 to be case insensitive equals" date="2009-11-19T18:33:00.593-05:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2009-11-19T18:35:09.355-05:00">INTERIM</status_change>
            <modified comment="Added a negated test for 2008 R2 and changed the test for windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <status_change date="2010-01-04T04:01:35.383-05:00">ACCEPTED</status_change>
            <modified comment="Removed the SP1 component in the CPE reference" date="2010-01-08T15:44:00.632-05:00">
              <contributor organization="DTCC">J. Daniel Brown</contributor>
            </modified>
            <status_change date="2010-01-08T15:44:32.646-05:00">INTERIM</status_change>
            <status_change date="2010-01-25T04:00:02.861-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5356 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-12-21T11:00:20.063-05:00">INTERIM</status_change>
            <status_change date="2011-02-07T04:00:12.352-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:3180 - new inventory for SQL Server 2008 R2 64-bit" date="2013-07-05T09:33:00.078-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-05T09:37:47.593-04:00">INTERIM</status_change>
            <status_change date="2013-07-22T04:03:06.694-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
        <criterion comment="a version of Windows for the x64 architecture is installed" test_ref="oval:org.mitre.oval:tst:3653"/>
        <criterion negate="true" comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4870" version="6" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2008 (32-bit) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_server_2008:::x86"/>
        <description>The operating system installed on the system is Microsoft Windows Server 2008
          (32-bit)</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-26T10:44:02">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-03-26T16:27:25.280-04:00">DRAFT</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.555-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:20.181-04:00">INTERIM</status_change>
            <status_change date="2008-05-12T04:00:10.618-04:00">ACCEPTED</status_change>
            <modified comment="Changed registry check for amd64 to be a case insensitive equals" date="2009-09-04T10:48:00.140-05:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2009-09-07T04:00:25.188-04:00">INTERIM</status_change>
            <status_change date="2009-09-28T04:00:03.365-04:00">ACCEPTED</status_change>
            <modified comment="Replaced negation of test for x64 with a case insensitive test for x86, added a negated test for 2008 R2, and changed the test for windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:54:00.233-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.439-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.144-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <status_change date="2010-01-04T04:01:33.629-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:4870 - Corrected the CPE names for Windows Server 2008" date="2010-12-21T10:57:00.617-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-12-21T11:00:20.655-05:00">INTERIM</status_change>
            <status_change date="2011-02-07T04:00:11.791-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:7697"/>
        <criterion comment="a version of Windows for the x86 architecture is installed" test_ref="oval:org.mitre.oval:tst:3823"/>
        <criterion negate="true" comment="Windows Server 2008 R2 is installed" test_ref="oval:org.mitre.oval:tst:10317"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:229" version="11" class="inventory">
      <metadata>
        <title>Microsoft Windows 2000 SP4 or later is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2000"/>
        <description>The operating system installed on the system is Microsoft Windows 2000 SP4 or later.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-07-27T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:16.978-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:35.885-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.915-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:11:20.008-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:40.599-04:00">ACCEPTED</status_change>
            <modified comment="Changed the tests for SP4 or later and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <status_change date="2009-12-21T04:00:27.963-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.779-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:42.620-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:39.348-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:27.340-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:229 - added CPE references in several inventories for uniformity" date="2014-04-10T08:25:00.988-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-04-10T08:32:03.976-04:00">INTERIM</status_change>
            <status_change date="2014-04-28T04:02:37.344-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:2"/>
        <criterion comment="SP4 or later Installed" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:228" version="5" class="inventory">
      <metadata>
        <title>Microsoft Windows Vista is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_vista"/>
        <description>The operating system installed on the system is Microsoft Windows Vista</description>
        <oval_repository>
          <dates>
            <submitted date="2007-02-13T12:46:06">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2007-02-13T14:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:12.775-04:00">INTERIM</status_change>
            <status_change date="2007-04-13T15:13:39.760-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.893-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T07:56:25.929-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:40.286-04:00">ACCEPTED</status_change>
            <modified comment="Vista test updated because of the conflictions with Server 2008" date="2008-03-26T10:51:02.210-04:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-03-31T04:00:22.690-04:00">INTERIM</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.315-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-21T04:00:18.129-04:00">ACCEPTED</status_change>
            <modified comment="Changed the tests for Vista and windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:55:00.401-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.669-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2009-12-28T04:00:11.598-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Vista is installed" test_ref="oval:org.mitre.oval:tst:7914"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:128" version="7" class="inventory">
      <metadata>
        <title>Microsoft Windows Server 2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_2003_server"/>
        <description>The operating system installed on the system is Microsoft Windows Server
          2003.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-26T12:55:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.775-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:05:37.807-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:26.547-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.348-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:26:22.372-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:11.254-04:00">ACCEPTED</status_change>
            <modified comment="Changed the test for windows to be case insensitive and replaced the test for Windows 5.2 with a new test for 2003" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.085-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:31:00.354-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim
                Harrison</contributor>
            </modified>
            <status_change date="2009-12-28T04:00:06.591-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:128 - Updated CPE reference" date="2011-02-17T13:33:00.123-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:35:10.049-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:10.940-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:11145"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:105" version="5" class="inventory">
      <metadata>
        <title>Microsoft Windows XP is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_xp"/>
        <description>The operating system installed on the system is Microsoft Windows XP.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-26T12:55:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.244-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:01:55.267-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:25.969-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.073-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:27:52.098-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:10.499-04:00">ACCEPTED</status_change>
            <modified comment="Changed the test for windows to be case insensitive and replaced the test for Windows 5.1 with a new test for Windows XP" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <modified comment="Added anchors and spaces to regular expression" date="2009-12-04T14:56:00.359-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <modified comment="Updating regex to include parenthesis" date="2009-12-08T17:32:00.792-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2010-01-04T04:01:15.920-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:11179"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:36" version="6" class="inventory">
      <metadata>
        <title>Microsoft Windows NT is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:microsoft:windows_nt"/>
        <description>The operating system installed on the system is Microsoft Windows NT.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-26T12:55:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2006-06-26T12:55:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.621-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T08:04:19.640-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:44.870-04:00">ACCEPTED</status_change>
            <modified comment="Removed reference to test for nt 4.0 and add reference to nt 4.0 inventory definition." date="2008-02-28T12:48:00.621-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Removed datatype attribute from the value element of the registry state." date="2008-02-28T14:05:00.268-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-28T14:07:43.712-05:00">INTERIM</status_change>
            <status_change date="2008-03-17T04:00:20.911-04:00">ACCEPTED</status_change>
            <modified comment="Changed the CPE reference" date="2008-04-04T11:17:00.580-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2008-04-04T11:26:38.604-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:18.502-04:00">ACCEPTED</status_change>
            <modified comment="Changed the test for windows to be case insensitive" date="2009-12-02T16:05:00.749-04:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2009-12-02T16:05:00.749-04:00">INTERIM</status_change>
            <status_change date="2009-12-21T04:00:30.408-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the installed operating system is part of the Microsoft Windows family" test_ref="oval:org.mitre.oval:tst:99"/>
        <criterion comment="Windows NT 4.0 is installed" test_ref="oval:org.mitre.oval:tst:3089"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1899" version="5" class="inventory">
      <metadata>
        <title>Symantec Enterprise Security Manager 6 is installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:symantec:enterprise_security_manager:6"/>
        <description>Symantec Enterprise Security Manager 6 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-12T03:29:54.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-06-12T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-29T09:42:00.622-04:00">INTERIM</status_change>
            <status_change date="2007-07-16T09:55:12.208-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.332-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:25.539-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:03.731-05:00">ACCEPTED</status_change>
            <modified comment="Altered criterion comment to align with test purpose" date="2009-05-25T10:32:00.713-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-05-25T10:32:00.713-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:34.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1899 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:27.185-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:14.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Symantec Virus Protect 6 is installed and active." test_ref="oval:org.mitre.oval:tst:3683"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1663" version="4" class="inventory">
      <metadata>
        <title>Symantec Small Office or Home Office Edition Virus scan is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:symantec:norton_antivirus"/>
        <description>Symantec Small Office or Home Office Virus Scan is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-12T03:29:54.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-06-12T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-29T09:41:59.170-04:00">INTERIM</status_change>
            <status_change date="2007-07-16T09:55:09.644-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.682-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:51:42.904-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:00.910-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1663 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:21.343-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:12.455-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed virus scan software is Symantec Small Office or Home Office" test_ref="oval:org.mitre.oval:tst:3432"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12482" version="5" class="inventory">
      <metadata>
        <title>Microsoft IIS 4.0 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft IIS 4.0</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:iis:4.0"/>
        <description>The application Microsoft IIS 4.0 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-06-08T13:00:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </submitted>
            <status_change date="2011-01-12T13:28:42.364-05:00">DRAFT</status_change>
            <status_change date="2011-01-31T04:00:12.477-05:00">INTERIM</status_change>
            <status_change date="2011-02-21T04:00:37.262-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12482 - product info corrected" date="2015-04-15T12:33:00.646-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-15T12:36:18.911-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:07.462-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="IIS 4.0 Major Version" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" test_ref="oval:org.mitre.oval:tst:3098"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test id="oval:org.mitre.oval:tst:3653" version="4" comment="a version of Windows for the x64 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3180"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:7697" version="2" comment="Windows Server 2008 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:3207"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3823" version="2" comment="a version of Windows for the x86 architecture is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:3649"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:10317" version="4" comment="Windows Server 2008 R2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:5506"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3073" version="5" comment="SP4 or later Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2878"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:2"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:7914" version="4" comment="Windows Vista is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:3828"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:11145" version="3" comment="Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:4907"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:11179" version="3" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5590"/>
      <state state_ref="oval:org.mitre.oval:ste:5477"/>
    </registry_test>
    <family_test id="oval:org.mitre.oval:tst:99" version="1" comment="the installed operating system is part of the Microsoft Windows family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:99"/>
      <state state_ref="oval:org.mitre.oval:ste:99"/>
    </family_test>
    <registry_test id="oval:org.mitre.oval:tst:3089" version="2" comment="Windows NT 4.0 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:2894"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3683" version="2" comment="Symantec Virus Protect 6 is installed and active." check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2384"/>
      <state state_ref="oval:org.mitre.oval:ste:3566"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3432" version="2" check_existence="at_least_one_exists" check="all" comment="the installed virus scan software is Symantec Small Office or Home Office" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2657"/>
      <state state_ref="oval:org.mitre.oval:ste:3300"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3099" version="1" comment="IIS 4.0 Major Version" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1754"/>
      <state state_ref="oval:org.mitre.oval:ste:2904"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3098" version="1" comment="IIS minor version equals 0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:938"/>
      <state state_ref="oval:org.mitre.oval:ste:2903"/>
    </registry_test>
  </tests>
  <objects>
    <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key>
      <name>PROCESSOR_ARCHITECTURE</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:717" version="3" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CSDVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:5590" version="1" comment="This registry key identifies the Windows ProductName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>ProductName</name>
    </registry_object>
    <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2384" version="1" comment="The registry key that holds the location of the 'VirusProtect6' directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion</key>
      <name>Home Directory</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Symantec\InstalledApps</key>
      <name>Internet Security</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\INetStp</key>
      <name>MajorVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\INetStp</key>
      <name>MinorVersion</name>
    </registry_object>
  </objects>
  <states>
    <registry_state id="oval:org.mitre.oval:ste:3180" version="4" comment="amd64 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Aa][Mm][Dd]64$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3207" version="3" comment="The registry key matches with 2008" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[a-zA-Z0-9\(\)\s]*2008[a-zA-Z0-9\(\)\s]*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3649" version="2" comment="x86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="case insensitive equals">x86</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:5506" version="4" comment="The registry key matches with 2008 R2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[a-zA-Z0-9\(\)\s]*2008 [Rr]2[a-zA-Z0-9\(\)\s]*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2878" version="3" comment="Regex that matches Service pack is 4 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] ([4-9]|([1-9][0-9]+))$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2" version="1" comment="Registry key has a value of 5.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3828" version="4" comment="The registry key matches with Vista" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[a-zA-Z0-9\(\)\s]*[Vv][Ii][Ss][Tt][Aa][a-zA-Z0-9\(\)\s]*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:4907" version="4" comment="The registry key matches with 2003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[a-zA-Z0-9\(\)\s]*2003[a-zA-Z0-9\(\)\s]*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:5477" version="4" comment="The registry key matches with Windows XP" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[a-zA-Z0-9\(\)\s]*[Ww][Ii][Nn][Dd][Oo][Ww][Ss] [Xx][Pp][a-zA-Z0-9\(\)\s]*$</value>
    </registry_state>
    <family_state id="oval:org.mitre.oval:ste:99" version="2" comment="Microsoft Windows family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family operation="case insensitive equals">windows</family>
    </family_state>
    <registry_state id="oval:org.mitre.oval:ste:2894" version="2" comment="Registry key has a value of 4.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>4.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3566" version="2" comment="The registry key has a value not equal to 0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3300" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
  </states>
</oval_definitions>