> For the complete documentation index, see [llms.txt](https://breakpoint-journal.gitbook.io/breakpoint/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://breakpoint-journal.gitbook.io/breakpoint/windows/windows-privilege-escalation/keeping-up-with-the-kbs-patch-enumeration.md).

# Keeping Up with the KBs: Patch Enumeration

{% code title="Shows if box is a VM and/or patched recently" %}

```batch
systeminfo
```

{% endcode %}

Review the installed KBs under [HotFixes](https://www.catalog.update.microsoft.com/Search.aspx?q=hotfix) to estimate when the host was last patched. Non-admin users may not see the full list. You can also check `System Boot Time` and `OS Version` for a rough patch baseline. If the host has not rebooted in more than six months, it may also be missing regular patching.

{% code title="Query patches and their statuses on the box" %}

```batch
wmic qfe
wmic qfe list brief
```

{% endcode %}

* <https://docs.microsoft.com/en-us/windows/win32/wmisdk/wmi-start-page>
* [QFE (Quick Fix Engineering)](https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-quickfixengineering)

{% code title="Retrieve hotfixes in Powershell" %}

```powershell
Get-Hotfix | ft -AutoSize
```

{% endcode %}

{% code title="Display installed software" %}

```batch
wmic product get name
```

{% endcode %}

Run LaZagne afterward to check for stored credentials for those applications

```powershell
Get-WmiObject -Class Win32_Product | select Name, Version
```

You can then query the patches against this update-guide.

* <https://msrc.microsoft.com/update-guide/vulnerability>