Trusting Microsoft Baseline Security Analyzer 2.3


Not too long ago, Microsoft updated, or at least updated the version of the Microsoft Baseline Security Analyzer (MBSA). This tool has been around for a very long time. At first, the tool had great hope as it gave insight into settings that were not so easy to discover and other configurations that were proprietary to Microsoft.

Over the years, the tool continues to be updated without ever adding much value. And the tool is not named appropriately at all. “Baseline Security Analyzer” would indicate (to someone that had never seen it before) a tool that would give you a clear view of the security baseline for a computer you analyze. Unfortunately, this is not the case.

Before we start to dissect where the tool fa