SecurityInsight settings · Settings > Risk Analysis reports
Patch cycle: read Microsoft update release dates
| Key | SI_PatchCycle_MsrcDates |
|---|---|
| Where | Settings > Risk Analysis reports > Vulnerability (CVE) filters |
| Type | On / off |
| Default | On. |
| Edition | Community |
What it does
Reads the release date of each Microsoft update (by its KB number) from Microsoft's public Security Update Guide (api.msrc.microsoft.com, no sign-in), once a day, and keeps it in the install. Defender names the update and its KB but not when it was released.
When enabled
a Microsoft fix's own release date decides In monthly cycle / Catch-up (an out-of-band update by its own date).
When disabled
no call to api.msrc.microsoft.com; the month the update's name says (its Patch Tuesday) is used. A third-party fix uses the first detection either way.
Risk and how to reverse it
Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Turn off when the install must not call out to api.msrc.microsoft.com (a private network that does not allow it). A failed call is said once per run and the name rule is used.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack