first prompt:

MATCH (s:SoftwareArtifact)
WHERE "docker" IN s.labelSet
RETURN s

second query: return the ids of the Software installations with problems

MATCH (si:SoftwareInstallation)-[:related_artifact]->(sa:SoftwareArtifact)
WHERE (id(sa) = 10509 AND si.version>="23" AND si.version<="26.1.3") //CLI ASCII WERT
  OR (id(sa)=17385 AND si.version>="4.10.1" AND si.version<="4.34.2")//DESTOP
  OR (id(sa)=10508 AND si.version>="23" AND si.version<="26.1.3")//ENGINE
RETURN id(si)

systems that have inst. and findings

// First, collect the IDs of systems based on the conditions
MATCH (s:System)-[:related_software]->(si:SoftwareInstallation)-[:related_artifact]->(sa:SoftwareArtifact)
WHERE 
  (id(sa) = 10509 AND si.version >= "23" AND si.version <= "26.1.3") // CLI
  OR (id(sa) = 17385 AND si.version >= "4.10.1" AND si.version <= "4.34.2") // Desktop
  OR (id(sa) = 10508 AND si.version >= "23" AND si.version <= "26.1.3") // Engine
WITH COLLECT(id(s)) AS idOfAffiliatedSystems

// Then, match systems and findings using the collected IDs and group by systemID, give also provider name
MATCH (sy:System)-[:related_weakness]->(f:Finding)
WHERE id(sy) IN idOfAffiliatedSystems
RETURN id(sy)AS SystemID,sy.provider_name, COLLECT(f.title) AS findings
ORDER BY SystemID

• systems that has no EDRAgent: the count is 5200(from 5415)

// First, collect the IDs of systems based on the conditions
MATCH (s:System)-[:related_software]->(si:SoftwareInstallation)-[:related_artifact]->(sa:SoftwareArtifact)
WHERE 
  (id(sa) = 10509 AND si.version >= "23" AND si.version <= "26.1.3") // CLI
  OR (id(sa) = 17385 AND si.version >= "4.10.1" AND si.version <= "4.34.2") // Desktop
  OR (id(sa) = 10508 AND si.version >= "23" AND si.version <= "26.1.3") // Engine
AND NOT EXISTS ((s)-[:has_agent]->(:EDRAgent))
RETURN COUNT(s)

• people res for that system
• number of applications that run on probl. systems:

// First, collect the IDs of systems based on the conditions
MATCH (s:System)-[:related_software]->(si:SoftwareInstallation)-[:related_artifact]->(sa:SoftwareArtifact)
WHERE 
  (id(sa) = 10509 AND si.version >= "23" AND si.version <= "26.1.3") // CLI
  OR (id(sa) = 17385 AND si.version >= "4.10.1" AND si.version <= "4.34.2") // Desktop
  OR (id(sa) = 10508 AND si.version >= "23" AND si.version <= "26.1.3") // Engine
WITH s

MATCH (a:Application)-[:runs_on]->(s) 
RETURN COUNT(a)

count=420

• services based on probl. applications and count of them:

// First, collect the IDs of systems based on the conditions
MATCH (s:System)-[:related_software]->(si:SoftwareInstallation)-[:related_artifact]->(sa:SoftwareArtifact)
WHERE 
  (id(sa) = 10509 AND si.version >= "23" AND si.version <= "26.1.3") // CLI
  OR (id(sa) = 17385 AND si.version >= "4.10.1" AND si.version <= "4.34.2") // Desktop
  OR (id(sa) = 10508 AND si.version >= "23" AND si.version <= "26.1.3") // Engine
WITH s

MATCH (a:Application)-[:runs_on]->(s) 
WITH a,s

MATCH (a)-[:serves]->(ser:Service)
RETURN ser.name,COUNT(ser)