Share via

Security Focus: User PowerShell to Obtain Microsoft Security Update Information

  • Article

Want to use PowerShell to create a html report of Microsoft security updates? No problem. Read on...

 

Back in November 2016, the Microsoft Security Response Centre (MSRC) team announced the Security Update Guide portal.

Furthering our commitment to security updates

 

This portal also provides a new RESTful API to obtain Microsoft security update information... AND to make life even easier, there's now a PowerShell module, too.

 

 
Find-Module "*MSRC*"

Install-Module -Name MsrcSecurityUpdates -Verbose

Get-Command -Module MsrcSecurityUpdates

 

You should now have access to the module.

capture211

 

Now, to get an API key from the portal.

https://portal.msrc.microsoft.com/en-us/developer

 

You can use the API key with Set-MsrcApiKey on a per session basis, or supply it individually to certain cmldets.

 

Time for some fun! Use Get-MsrcSecurityUpdate to get a list of the update documents published via the API.

capture212

 

Let's generate a html report for 2017-Mar.

 

 
Get-MsrcCvrfDocument -ID 2017-Mar | Get-MsrcVulnerabilityReportHtml | Out-File -FilePath 2017-Mar-Cvrf-CVE-Summary.html

 

Some report snippets...

 

capture213

 

capture214

 

That's only a taster...