{"id":19692,"date":"2023-08-15T06:46:55","date_gmt":"2023-08-15T10:46:55","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19692"},"modified":"2023-08-17T15:43:18","modified_gmt":"2023-08-17T19:43:18","slug":"proactive-patching-alerts","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/","title":{"rendered":"Proactive Patching alerts"},"content":{"rendered":"
\"Proactive<\/a>
proactive scrabble tiles<\/figcaption><\/figure>\n

As a SME or team lead, ever need to know ‘Proactive Patching alerts’?\u00a0 i.e. What servers need patches applied, aren’t patching, or were missed?\u00a0 This pack builds on three (3) pillars – Health\/Security\/Compliance, enabling Cyber teams and more.\u00a0 This became an alternate option to a complex pack, with SSRS report, used by a customer to identify systems.\u00a0 The report was long, and had many blank lines\/pages, which required a re-write.\u00a0 This pack started with the pending restart monitor directly from the AquilaWeb reboot pack<\/a> logic.\u00a0 The logic helps SysAdmin\/Domain Admin\/NOC\/NOSC\/SOC teams to know when servers need reboots.\u00a0 This need is driven further due to multiple reboots (sometimes) required with Windows monthly updates, and Application updates.\u00a0 Used across multiple customers, this is the first pack enabling a proactive stance to answer the ‘Am I compliant’ question.<\/p>\n

 <\/p>\n

Quick Download: <\/strong><\/span><\/span>https:\/\/github.com\/theKevinJustin\/ProactivePatchUptimeReboot\/<\/a><\/p>\n

<\/h2>\n

Testing the Proactive Patch alerts<\/h2>\n

David Allen built the ‘Aquilaweb.Support.PendingReboot.Monitor.PendingReboot’ PowerShell monitor, to tell system owners when the pending restart flag was present.\u00a0 Some builds though, make system changes which repeatedly flip the registry key, causing many alerts.\u00a0 Also, downloading the Aquila pack is a trick, as TechNet was retired.<\/p>\n

 <\/p>\n

David provided a great idea, which was built upon.\u00a0 This gave rise to the question of, what if the server was not patched, or not rebooted in a period of time?\u00a0 \u00a0With my Cyber hat on, this became the next piece of content to create.\u00a0 That gave rise to another question – do these scenarios need to reflect in health (monitor), or not (rule)?\u00a0 \u00a0We’re all about choices, free will, so the pack is built with those options (rules disabled out of the box).<\/p>\n

\"Pending<\/a>
Pending restart monitor XML showing options<\/figcaption><\/figure>\n

The pack is setup to alert with CBS application updates, SCCM\/MECM\/Config Mgr Endpoint Management updates, and Windows Updates.\u00a0 This has been my experience for the most accurate reflections of alerts on secure builds where Application\/System Owner needs to take action.<\/p>\n

Last Patch and Last Reboot monitor\/rules in the download, are set to 45 days.\u00a0\u00a0Tune this value down, if patching occurs at the 30 day mark, increase if you need more time before alerts.<\/p>\n

\"Last<\/a>
Last Patch Monitor reflecting number of days<\/figcaption><\/figure>\n

 <\/p>\n

Otherwise, download and import into your environment.\u00a0 Depending on your subscription\/notification settings, the Proactive set of alerts are built upon the Windows Operating System class.\u00a0 If subscriptions include the class, the notifications are automatic to System\/Application owners.<\/p>\n

 <\/p>\n

Useful links<\/h3>\n

David Allen blog<\/a><\/p>\n

Addendum, what does it mean blog<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

As a SME or team lead, ever need to know ‘Proactive Patching alerts’?\u00a0 i.e. What servers need patches applied, aren’t patching, or were missed?\u00a0 This pack builds on three (3) pillars – Health\/Security\/Compliance, enabling Cyber teams and more.\u00a0 This became an alternate option to a complex pack, with SSRS report, used by a customer to … Continue reading “Proactive Patching alerts”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,567,5,7,545,530],"tags":[25,707,729,240,710,711,709,310,708,334,342],"class_list":["post-19692","post","type-post","status-publish","format-standard","hentry","category-administration","category-authoring","category-best-practice","category-mp-management-pack","category-powershell","category-scom","tag-addendum","tag-aquila-web-reboot","tag-get-hotfix","tag-monitor","tag-not-patched","tag-not-rebooted","tag-pending-restart","tag-powershell","tag-proactive","tag-rule","tag-scom"],"yoast_head":"\nProactive Patching alerts - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"Incorporate the Proactive Patching alerts SCOM management pack to help add alerting capability to answer 'am I compliant' question.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Proactive Patching alerts - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"Incorporate the Proactive Patching alerts SCOM management pack to help add alerting capability to answer 'am I compliant' question.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-15T10:46:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-17T19:43:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/proactive.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"Proactive Patching alerts\",\"datePublished\":\"2023-08-15T10:46:55+00:00\",\"dateModified\":\"2023-08-17T19:43:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/\"},\"wordCount\":459,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/proactive.jpg\",\"keywords\":[\"addendum\",\"Aquila web reboot\",\"get-hotfix\",\"monitor\",\"not patched\",\"not rebooted\",\"pending restart\",\"powershell\",\"proactive\",\"rule\",\"SCOM\"],\"articleSection\":[\"Administration\",\"Authoring\",\"Best Practice\",\"MP Management Pack\",\"PowerShell\",\"SCOM\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/\",\"name\":\"Proactive Patching alerts - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/proactive.jpg\",\"datePublished\":\"2023-08-15T10:46:55+00:00\",\"dateModified\":\"2023-08-17T19:43:18+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Incorporate the Proactive Patching alerts SCOM management pack to help add alerting capability to answer 'am I compliant' question.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/proactive.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/proactive.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/15\\\/proactive-patching-alerts\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Proactive Patching alerts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Proactive Patching alerts - Kevin Justin's Blog","description":"Incorporate the Proactive Patching alerts SCOM management pack to help add alerting capability to answer 'am I compliant' question.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/","og_locale":"en_US","og_type":"article","og_title":"Proactive Patching alerts - Kevin Justin's Blog","og_description":"Incorporate the Proactive Patching alerts SCOM management pack to help add alerting capability to answer 'am I compliant' question.","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2023-08-15T10:46:55+00:00","article_modified_time":"2023-08-17T19:43:18+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/proactive.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"Proactive Patching alerts","datePublished":"2023-08-15T10:46:55+00:00","dateModified":"2023-08-17T19:43:18+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/"},"wordCount":459,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/proactive.jpg","keywords":["addendum","Aquila web reboot","get-hotfix","monitor","not patched","not rebooted","pending restart","powershell","proactive","rule","SCOM"],"articleSection":["Administration","Authoring","Best Practice","MP Management Pack","PowerShell","SCOM"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/","name":"Proactive Patching alerts - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/proactive.jpg","datePublished":"2023-08-15T10:46:55+00:00","dateModified":"2023-08-17T19:43:18+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Incorporate the Proactive Patching alerts SCOM management pack to help add alerting capability to answer 'am I compliant' question.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/proactive.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/proactive.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/15\/proactive-patching-alerts\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Proactive Patching alerts"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19692","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19692"}],"version-history":[{"count":6,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19692\/revisions"}],"predecessor-version":[{"id":19749,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19692\/revisions\/19749"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}