RE: How to generate list of patches installed?

From: Laura A. Robinson (larobins_at_bellatlantic.net)
Date: 07/10/03

  • Next message: Richard Bejtlich: "RE: investigating misuse of the internet" 
    To: "'Simon R. Binder'" <sbinder@glynwood.org>, "'Focus-MS'" <focus-ms@securityfocus.com>
Date: Thu, 10 Jul 2003 11:11:42 -0400

    http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b262841

    Laura

    > -----Original Message-----
    > From: Simon R. Binder [mailto:sbinder@glynwood.org]
    > Sent: Wednesday, July 09, 2003 12:51 PM
    > To: Focus-MS
    > Subject: How to generate list of patches installed?
    >
    >
    > Hi, folks-
    >
    > HFNetChk and the Microsoft Baseline Security Analyzer allow
    > me to scan a domain and view a list of hotfixes *not*
    > installed on machines. I want to go one step further and
    > generate a list of all hotfixes installed on all machines-
    > including the individual hotfixes included in the rollups.
    > Ideally, I'd also like it to include hotfix q-numbers
    > included in applied service packs.
    >
    > Basically, I want to be able to take a given IDS alert from
    > my IDS log, identify the
    > hotfix(es) that address(es) the issue, and look at an
    > explicit list for the targeted machine to verify that the
    > fix(es) have been applied. Ultimately I will do this
    > programmatically as a way to be able to focus my attention
    > only on attacks that may have compromised my systems. To do
    > this, however, I need to generate the list of installed
    > hotfixes first.
    >
    > HFNetChk allows me to view hotfixes explicitly installed
    > (using the -history switch), but this only includes hotfixes
    > installed individually and doesn't enumerate hotfixes
    > included in rollups or service packs.
    >
    > Does anyone know of a way for me to generate such a list of
    > installed hotfixes?
    >
    > Simon Binder
    > --
    > Manager, Information Technology
    > Glynwood Center
    > PO Box 157
    > Cold Spring, NY 10516
    > 845-265-3338 Fax: 845-265-3391
    > mailto:sbinder@glynwood.org
    > http://www.glynwood.org
    >
    >
    >
    > --------------------------------------------------------------
    > ---------------
    > --------------------------------------------------------------
    > ----------------
    >

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: Richard Bejtlich: "RE: investigating misuse of the internet"

    Relevant Pages