Skip to main content

Windows Update History Audit

Purpose​

The purpose of this document is to gather and present data about Windows Updates that have been installed on an endpoint.

Associated Content​

ContentTypeFunction
EPM - Data Collection - Get-WindowsUpdateReportAgnosticGathers the Windows Update data that the CWA script manipulates.
EPM - Script - Windows Update History AuditScriptCalls Get-WindowsUpdateReport and manipulates the data for insertion into pvl_windows_updates.
EPM - Custom Table - pvl_windows_updatesCustom TableStores information about Windows Update history for agents.
EPM - Dataview - Windows Update HistoryDataviewDisplays information about Windows Update history for agents.
EPM - Internal Monitor - Patches Not Installing > X DaysInternal MonitorMonitors that uses the pvl_windows_updates table for referencing installed updates.

Implementation​

The script Windows Update History Audit should be scheduled against all compliant Windows endpoints on a weekly basis.

If required, implement the Patches Not Installing > X Days monitor following the instructions in the documentation.

Changelog​

2025-04-10​

  • Initial version of the document