Getting more value from your endpoint security tool #4: Querying Tips for IT Operations
Orbital Advanced Search has an entire category dedicated to Posture Assessments which contains queries to check CPU data, network host connections, operating system information, installed programs, and more.