I think this should work for some basic version handling.
REM
http://ss64.org/viewtopic.php?id=879
Setlocal
:: Get Windows version numbers
For /f "tokens=2 delims=[]" %%G in ('ver') Do (set _version=%%G)
For /f "tokens=2,3,4 delims=. " %%G in ('echo %_version%') Do (set _major=%%G& set _minor=%%H& set _build=%%I)
REM Echo Major version: %_major% Minor Version: %_minor%.%_build%
...
REM seccheck.exe not compatible with Vista or above
if "%_major%">="6" goto compromised_stage
ECHO Running seccheck on %COMPUTERNAME%.
now.exe [Running seccheck on %COMPUTERNAME%.] >> %2:\Livecap_%COMPUTERNAME%\MIR-ROR.log
seccheck > %2:\Livecap_%COMPUTERNAME%\seccheck.log
move SecCheckLog.txt %2:\Livecap_%COMPUTERNAME%\SecCheckLog.txt
:compromised_stage
ECHO.
ECHO The following stage assesses for compromised code or settings.
ECHO.
...