So I'm trying to create a smart group showing which 10.6.8 machines have had 'Java for Mac OS X 10.6 Update 9' installed, so I can run rtrouton's excellent 'enable java web plugin' script and launchagent: https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/enable_java_web_plugins_at_login

Other com.apple.pkg.JavaForMacOSX10.6Update* receipts show, but not the latest (the one that disables the plugin by default). All machines in questions have been recon'd immediately after receiving the update from the local SWUS - on that I noticed that the package name doesn't seem to include 'Update 9,' BUT if I search for JavaSecurity that shows older updates.