Practical exercise—running a vulnerability scanner

In this exercise, we are going to download the Microsoft Baseline Analyzer Tool and run it against your local computer to look for vulnerabilities:

1. Go to Google and search for and download Microsoft's Baseline Analyzer tool. You can also just enter MBSA and it will find it.
2. Click on MBSASetup-x64-EN. The MBSA Setup wizard appears. Press Next:

Figure 10

3. Click on I accept the license agreement, then press Next:

Figure 11

4. On the destination folder page, press Next.
5. On the start installation page, press Install, then the installation progress page will appear:

Figure 12: Installation progress

6. Then, the setup will finish:

Figure 13: Installation complete

7. A shortcut is placed on the desktop. Double-click it. The UAC prompt appears; press Yes:

Figure 14: MBSA shortcut

8. The MBSA Management console appears; press Scan a Computer, and then at the bottom right, press Start Scan:

Figure 15: MBSA management console

9. The scan starts and it downloads security update information...