In this exercise, we are going to download the Microsoft Baseline Analyzer Tool and run it against your local computer to look for vulnerabilities:

1. Go to Google and search for and download Microsoft's Baseline Analyzer tool. You can also just enter MBSA and it will find it.
2. Click on MBSASetup-x64-EN. The MBSA Setup wizard appears. Press Next:

3. Click on I accept the license agreement, then press Next:

4. On the destination folder page, press Next.
5. On the start installation page, press Install, then the installation progress page will appear:

6. Then, the setup will finish:

7. A shortcut is placed on the desktop. Double-click it. The UAC prompt appears; press Yes:

8. The MBSA Management console appears; press Scan a Computer, and then at the bottom right, press Start Scan:

9. The scan starts and it downloads security update information from Microsoft. As it is going to compare the computer updates against the latest updates for Windows 10, this will take about 10-15 minutes:

10. The scan results page comes up; you will notice that the default is Score (worst first). Scroll down:

11. You can see that the MBSA is a vulnerability scanner that would be used as a credentialed scan and that it produces some good results, but it is passive and informational, and did not try to exploit the computer at all:

You will now notice if you have any vulnerabilities on your computer. There are hyperlinks below each item listed, giving you information on how to update your vulnerabilities. Look at each of these in turn and take the appropriate actions.