Popular tips

What does MBSA scan for?

by Rhyley Bryan

What does MBSA scan for?

Microsoft Baseline Security Analyzer (MBSA) is a software tool released by Microsoft to Determine security state by assessing missing security updates and less-secure security settings within Microsoft Windows, Windows components such as Internet Explorer, IIS web server, and products Microsoft SQL Server, and …

How do I run a MBSA report?

Scanning Your System

  1. On the Programs menu, click Microsoft Baseline Security Analyzer.
  2. Click Scan a computer.
  3. Leave all options set to default and click Start Scan.
  4. MBSA will download the list of latest security catalogue from Microsoft and begin the scan.

Is MBSA still supported?

Microsoft support and updates for MBSA has ended. The current version 2.3 does not offer official support for Windows 10 or Windows Server 2016. The Microsoft MBSA webpage has been removed.

Is there a command line tool for MBSA?

If you are already familiar with MBSA, then you know that the GUI version allow you to generate report of remote servers from a workstation. But did you know that MBSA also includes a command line tool allowing you to perform the same type of tasks and even more: MBSACli.exe.

What does the Baseline Security Analyzer ( MBSA ) do?

The Microsoft Baseline Security Analyzer (MBSA) is a software tool that helps determine the security of your Windows computer based on Microsoft’s security recommendations.

What kind of update is required for MBSA?

MBSA automatically updates computers that need an updated WUA client if Configure computers for Microsoft Update and scanning prerequisites is selected. IIS 5.0, 5.1 or 6.0 (required for IIS vulnerability checks). SQL Server 2000 or MSDE 2.0 (required for SQL vulnerability checks).

Where is the report file stored in MBSA?

MBSA generates a report file in the profile directory of the logged in user (%userprofile%). This report file is stored on the computer from which you ran the MBSA tool. MBSA displays different icons in the report score columns depending upon whether a vulnerability was found on the scanned machine.