Is it possible to replicate Not IN from insightvm into a tag, group or scheduled report i can downlooad locally?

Im trying to bypass insightvm and do things locally, but i cant seem to replicate, not in, for vulnerability categories NOT IN microsoft patch to find 3rd party vulnerabilities, could i do this with sql query?

vulnerability.categories NOT IN [‘microsoft patch’]