ISE - Posture bluekeep

[carlos.ibarra]

Is there any way that through the ISE postures to verify if the windows are fitted with the patches to avoid bluekeep?

[Damien Miller · Accepted solution]

You should be able to approach this a couple ways. You could check for the presence of a file if you know what the fix includes. An alternative would be to build a simple check for the existence of a registry key assuming the KB4499175 that fixes bluekeep generates one.

The challenge that might exist is if the fix for Bluekeep is found in multiple KB's. KB4499175 is specifically the security only KB.