Managed Sentinel – Alert 038
Alert ID | MS-A038 |
Alert Name | Missing Windows security and critical updates |
Description | This alert identifies Windows security and critical updates that are missing from Windows computers monitored through Azure Security Center. |
Severity Level | High |
Threat Indicator | Unpatched or outdated software |
MITRE ATT&CK Tactics | Initial Access Persistence Execution Priviledge Escalation Defense Evasion Credential Access Lateral Movement Impact |
Log sources | Azure Security Center |
Recommendations | 1. Apply patches as per instructions 2. Scheduled CR may be needed based on your corporate policies |