The main feature that is helpful for us in Qualys Patch Management is that we can make registry changes and run scripts through this particular module. We can either run specific scripts, update software, or remove specific software versions. For example, in the case of 7-Zip, when we update it, it installs the latest version but does not remove the older version. Therefore, we use scripts, PowerShell scripts, and we bypass PowerShell execution policies through this module, allowing us to achieve the removal of that folder version of 7-Zip. This feature is very helpful, and it allows us to take preventive measures for zero-day vulnerabilities. Additionally, the risk-based approach for creating automation to address risks is used mainly through dashboards. The dashboards give us a true risk dashboard. They show us what assets we can prioritize for patching and what critical patches we are pending for those machines. Accordingly, we create patch jobs and execute them, and initiate the reboot on priority. Additionally, we initiate some of the machines to reboot for creating another job as we have implemented these actions.

