insightVM check specific CIS policy rule

Hello! Has someone used a sql query to check if only specific CIS policy rules have been enabled for a group of assets? Let’s say I’m looking only to check if firewall domain rules have been applied for windows server 2022.