Microsoft Patch Tuesday Remediation Projects

InsightVM
1

Hi.
I am looking for assistance on creating a filter that will target all Microsoft patches for last month so I can create a remediation project.
Any assistance is much appreciated.

2

There’s a vulnerability category of ‘Microsoft Patch’ so if you filter for this and then filter by published date that might give you what you need.

For example, this will give you all Microsoft patches published in the last 30 days.

vulnerability.categories CONTAINS ‘Microsoft Patch’ && vulnerability.datePublished >= /NOW - P30D/

1 Like
3

This is how it’s been done at our shop under SLA. Should work for Projects. This method uses the exact date of the patch Tuesday.
Remediate 100% of vulnerabilities “where vulnerability.datePublished = 2025-03-11 && vulnerability.categories IN [‘microsoft’] && vulnerability.categories NOT IN [‘microsoft out-of-band’]” within 30 days of discovery.