Automate Creation of Microsoft Monthly Patch Baselines

Task

To create a process whereby each month a BigFix baseline can be automatically created that contains all the Microsoft Security Patches released that month. Part of the tricky part will be just selecting the patches for the month in question.

I'm thinking about writing it so that it includes only the patches released since the 1st of the month that start with MS are in the Enterprise Security site (I think that's the original Microsoft site name).

I'll want to exclude any patches that have SUPERSEDED in their names just in case.

We will also want to exclude any fixlet that does not have a default action.

Documentation

• Using Computer Group for an Action
• Any way to automate patch management?
• Automatic Baseline Creation and eventually AutoPatching
  • RESTAPI: Generate tasks to set client settings on target computer - Windows
  • RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows

Relevance

• names of unique values of relevant fixlets whose(name of site of it = "Updates for Windows Applications" AND exists names whose(exists (it as string as version) AND it as lowercase does not contain " (superseded)") of it) of members whose(operating system of it as lowercase starts with "win") of bes computer groups whose(name of it contains "Automatic Updates")

Parent : BigFix RestAPI