Files
nuclei-templates/code/windows/audit/automatic-windows-updates-disabled.yaml
2024-10-24 13:54:16 +07:00

32 lines
856 B
YAML

id: automatic-windows-updates-disabled
info:
name: Automatic Windows Updates Disabled
author: princechaddha
severity: medium
description: Checks if automatic Windows Updates are disabled.
impact: |
Without regular updates, systems may miss important security patches.
remediation: |
Enable automatic Windows Updates to ensure timely updates for system security.
tags: windows,updates,disabled,windows-audit
self-contained: true
code:
- pre-condition: |
IsWindows();
engine:
- powershell
- powershell.exe
args:
- -ExecutionPolicy
- Bypass
pattern: "*.ps1"
source: |
Get-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name NoAutoUpdate | Select-Object -ExpandProperty NoAutoUpdate
matchers:
- type: word
words:
- "1"