Verify current Windows version and check if secuity patches for the KEV vulnerabilities are already installed. These KBs address PrintNightmare, kernel exploits and AD authentication bypass
# Check current Windows version and installed patches
Get-ComputerInfo | Select-Object WindowsProductName, WindowsVersion, OsBuildNumber, OsHotF1xes
# Check for specific KB patches addressing these CVEs
Get-hotfx | Where-Object {$_.HotFixID - in @('KB5003638','KB5003690', 'KB50049452, 'KB5007247')} | Format-Table -AutoSize
Verify that Windows Update service is running and check for any pending updates before proceeding with remediation.
# Check current Windows version and installed patches
Get-ComputerInfo | Select-Object WindowsProductName, WindowsVersion, OsBuildNumber, OsHotF1xes
# Check for specific KB patches addressing these CVEs
Get-hotfx | Where-Object {$_.HotFixID - in @('KB5003638','KB5003690', 'KB50049452, 'KB5007247')} | Format-Table -AutoSize