
Without this extra step, Hinrichs says it's difficult to see what has changed and what needs his immediate attention. "Then, I run a standard DIFF tool on it to find the differences between the two files." "I take both XML files and flatten them," he says. He takes the newest scan results and the results he has saved from the last time he ran an MBSA scan.

Right now, it can't do that for me." Hinrichs has built his own workaround so he can sort through MBSA's XML-based results to better understand the most critical issues.

"What I want it to do is throw flags to show me what's different. He also agrees that MBSA's reporting is its weakest feature. "Integration with SQL would be great," agrees Jeff Hinrichs, technical lead at Dermatological Lab and Supply Co., in Council Bluffs, Iowa. "Most of the time, you'll get the little green check back, but what I really want to see are the critical issues that need fixing."Ĭlutter says he wishes the MBSA reports were integrated with something like SQL, so he could import the scan results into a database and make it easier for users to run exception reports. "It just takes too long to try and decipher the list," says Justin Clutter, CIO of Appserve Technologies LLC, a small hosting services provider based in Dallas, Texas.

That's about as deep as MBSA's reporting goes, and it's not deep enough for most users. Those items designated with a green check are checked out as secure.
MBSA REPORT FILE LOCATION FULL
MBSA scans every computer within an organization and returns a full list of items. Microsoft Baseline Security Analyzer (MBSA)
