Windows Forensics and Incident Recovery

Patch Management

Implementing a patch management infrastructure is extremely important when working with Windows systems. This holds true for workstations as well as critical servers. For workstations in particular, patches issued for Internet Explorer and Microsoft Office applications are of primary importance, since these are likely the most-used applications. The security of critical servers may greatly benefit from the application of patches. Vendor-issued patches are necessary to ensure the health and security of systems. Many times a patch will fix an issue that cannot be obviated through some other means, such as a firewall rule or simply disabling a service.

Microsoft provides a free tool called the Microsoft Baseline Security Analyzer ...