# agentsite-static-version=c7cd616c-7fb4-4878-a084-dfc2ac1933af
# automox.com

> AI-optimized mirror of automox.com containing 246 pages totalling 206,043 words of clean markdown content, structured data, and semantic HTML. Original source: https://automox.com. Last updated: 2026-10-23T13:14:42.198Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [IT governance at the speed of AI. | Automox](/content/site-root.html): Automox is built to close the gap between AI-speed threats and human-speed response. Patch what's patchable, mitigate what isn't, and govern all your Windows, macOS, and Linux endpoints with policy-driven automation. (912 words)

## Articles & Blog Posts

- [From 18 to 80 Tools: Building the Most Complete AI Integration for Endpoint Management | Automox](/content/blog/building-the-most-complete-ai-integration-for-endpoint-management.html): The Automox MCP Server now offers 80 tools, 6 guided workflow prompts, 18 modules, 9 MCP resources, and enterprise-grade security for AI-driven endpoint management. (4,688 words)
- [Patch everything from one, easy place.](/content/patching/software/index.html): Automated patching of all your Windows, Mac, and Linux operating systems and applications. (265 words)
- [Building the Automox MCP Server](/content/blog/automox-mcp/index.html): Learn how the Automox MCP Server prototype uses AI to navigate the console, perform routine tasks, and support more efficient, policy driven workflows. (2,911 words)
- [Patch Tuesday May 2026: CVE Analysis and AI-Discovered Bugs | Automox](/content/blog/patch-fix-tuesday-may-2026/index.html): May 2026 Patch Tuesday covers two pre-auth network RCEs in core Windows services, a Hyper-V guest-to-host escape, a kernel-level Wi-Fi RCE in macOS Tahoe 26.5, and AI-assisted vulnerability research credited across all three major operating systems. (2,602 words)
- [CISA BOD 26-04: The Three-Day Patching Clock | Automox](/content/blog/cisa-bod-26-04-three-day-clock/index.html): CISA's BOD 26-04 replaces CVSS severity with a risk-based model that demands three-day remediation of the highest-risk vulnerabilities. What the directive requires, how its decision tree really works, and why it will not stay federal. (2,338 words)
- [Patch Tuesday June 2026: CVE Analysis | Automox](/content/blog/patch-fix-tuesday-june-2026/index.html): June 2026 Patch Tuesday spreads thin across an HTTP.sys kernel RCE, network criticals, developer-tool flaws, Secure Boot, BitLocker, and Linux root. (1,815 words)
- [5 Unmanaged Device Problems and How to Fix Them | Automox](/content/blog/remediating-unmanaged-devices-with-automox/index.html): 74% of organizations have experienced security incidents from unmanaged devices. Learn the 5 critical problems they create and how cloud-native automation solves them. (2,243 words)
- [Patch Tuesday July 2026: CVE Analysis | Automox](/content/blog/patch-fix-tuesday-july-2026/index.html): July 2026 Patch Tuesday is the largest release on record, led by two actively exploited zero-days in ADFS and SharePoint, plus a cluster of pre-auth network flaws in core Windows. (2,730 words)
- [Automox + Splunk SOAR](/content/blog/automox-splunk-soar/index.html): See how to automate endpoint response across security and IT teams using Automox and Splunk SOAR (1,635 words)
- [Automated Patching Solutions Compared: 2026 Buyer's Guide | Automox](/content/blog/automated-patching-solutions-compared-2026/index.html): Compare automated patching solutions for 2026. Find the best patch management platform for cross-platform, cloud-native, and remote workforce needs. (2,127 words)
- [Vulnerability Remediation Orchestration in 2026 | Automox](/content/blog/automox-vulnerability-remediation-orchestration/index.html): How vulnerability remediation orchestration turns scanner findings into verified fixes on Windows, macOS, and Linux, and where Automox fits beside your scanner. (1,986 words)
- [November 2025 Patch Tuesday: Expert Analysis of Microsoft’s Latest Security Updates](/content/blog/patch-tuesday-november-2025/index.html): Discover expert insights from Automox cybersecurity experts on November 2025’s Patch Tuesday. Learn about critical Windows, WSL, and VS Code vulnerabilities, real-world exploitation risks, and actionable patching guidance to keep your systems secure. (955 words)
- [Automox Experts Analyze 107 New Vulnerabilities](/content/blog/patch-fix-tuesday-august-2025/index.html): August 2025’s Patch [FIX] Tuesday addresses critical Microsoft vulnerabilities affecting Hyper-V, Azure Virtual Machines, and SQL Server. Learn how crafted VHDX files, spoofed certificates, and SQL injection flaws can be exploited — plus recommendations for patching, database hardening, and securing virtualized environments. (757 words)
- [What Mythos-Ready Means for Your Patch and Remediation Strategy | Automox](/content/blog/what-mythos-ready-means-for-your-patch-and-remediation-strategy.html): The CSA published its Mythos-readiness briefing. Here's what it means for your patching strategy and why manual patching timelines no longer hold up. (1,786 words)
- [Automox Happenings: April 2025](/content/blog/automox-happenings-april-2025/index.html): Stay informed with Automox's latest product updates, insightful content, and upcoming events. (673 words)
- [Patch Tuesday March 2026: Windows CVE Analysis | Automox](/content/blog/patch-fix-tuesday-march-2026/index.html): March 2026 Patch Tuesday covers a push message memory leak, a two-stage GDI exploit chain, an accessibility EoP, and an SMB auth bypass. CVSS scores, attack paths, and what to patch first. (1,873 words)
- [Patch Tuesday September 2026: CVE Analysis | Automox](/content/blog/patch-fix-tuesday-september-2026/index.html): September 2026 Patch Tuesday ships a record 973 CVEs, led by two exploited elevation of privilege bugs in the Windows Update Stack and ALPC. Plus unauthenticated RCE in DNS and Remote Desktop Services, a SQL Copilot read-only bypass, and an Outlook Reading Pane RCE. (1,816 words)
- [Why IT Teams Are Drowning in Data (and How to Save Them)](/content/blog/why-it-teams-are-drowning-in-data/index.html): Drowning in data, starving for insight? Discover how unified reporting in Automox delivers real-time visibility across patching, automation, and device health — so your team can act faster, reduce risk, and simplify compliance. 
 (1,054 words)
- [Patch Tuesday May 2025: Expert Analysis of 71 New Windows Vulnerabilities](/content/blog/patch-tuesday-may-2025/index.html): Explore expert insights on 71 new Windows vulnerabilities from May 2025 Patch Tuesday — including risks in Internet Explorer, RDP, NTFS, and Visual Studio. Learn what each CVE means for your environment and how to respond effectively. (827 words)
- [Windows 10 End of Life: What IT Teams Need to Know (and How to Survive the Migration)](/content/blog/windows-10-end-of-life/index.html): Microsoft officially ended support for Windows 10 on October 14, 2025. As of that date, there are no more security updates, bug fixes, or technical support.  (931 words)
- [Patch Tuesday June 2025 Expert Analysis](/content/blog/patch-tuesday-june-2025/index.html): Automox cybersecurity experts review 66 Microsoft CVEs and macOS Sequoia security updates. (870 words)
- [Experts Analyze March 2025's Patch Tuesday](/content/blog/patch-tuesday-march-2025/index.html): Automox's cybersecurity experts analyze 57 new vulnerabilities from this months Patch Tuesday.  (802 words)
- [Automox vs Agentless Patch Management | Automox](/content/blog/automox-vs-agentless-patch-management/index.html): Compare agent-based and agentless patch management for lean IT teams with mixed Windows, macOS, and Linux fleets, from deployment effort to infrastructure. (2,467 words)
- [Expert Analysis | Patch Tuesday: July 2025](/content/blog/patch-tuesday-july-2025/index.html): Automox cybersecurity experts analyze July 2025's Patch Tuesday release — covering BitLocker CVE-2025-48001, critical sudo chroot flaw, secure boot certificates, and the “Schizophrenic ZIP” threat — plus clear actions you can deploy today. (940 words)
- [Understanding Recent Microsoft Defender Alerts on Automox Windows Endpoints](/content/blog/understanding-defender-alerts-on-windows-endpoints/index.html): Recent Microsoft Defender updates have caused false malware alerts on Automox PowerShell scripts running on Windows endpoints. This does not indicate a real threat or Automox malfunction. Learn how to allowlist Automox agent paths to prevent disruptions. (643 words)
- [Patch [Fix] Tuesday: April 2025](/content/blog/patch-tuesday-april-2025/index.html): Automox’s cybersecurity team offers expert analysis of this month’s Patch Tuesday and macOS vulnerabilities (789 words)
- [Measure MTTR with Automox in Real Time](/content/blog/measure-mttr-with-automox-in-real-time/index.html): Gain real-time visibility into remediation speed. Learn how Automox helps you track, measure, and reduce MTTR across all endpoints (1,202 words)
- [AI, Humans, and the Hybrid Reality of IT in 2026: Lessons From Autonomous IT Live](/content/blog/ai-humans-and-the-hybrid-reality-of-it-in-2026/index.html): In this conversation, Automox CEO Justin Talerico joins host Landon Miles for a candid discussion on IT burnout, automation trust, tool sprawl, and more. (1,219 words)
- [Patch Tuesday October 2026: CVE Analysis | Automox](/content/blog/patch-fix-tuesday-october-2026/index.html): October 2026 Patch Tuesday ships a record 1,408 CVEs, led by an exploited Windows Shell Mark of the Web bypass and another Outlook Reading Pane RCE. (1,368 words)
- [Rapid7, CrowdStrike, and Tenable Patch Tool Integrations | Automox](/content/blog/patch-tools-rapid7-crowdstrike-tenable-integrations.html): A 2026 matrix of patch tools that integrate with Rapid7, CrowdStrike, and Tenable, plus five tests that show whether an integration closes the remediation loop. (1,763 words)
- [Expert Analysis: Patch Tuesday October 2025](/content/blog/patch-tuesday-october-2025/index.html): Automox Experts Analyze 172 New Vulnerabilities from October 2025's Patch Tuesday
 (1,101 words)
- [Half-Automated, Fully Exposed: Endpoint Management Hits a Wall in 2026 | Automox](/content/blog/half-automated-fully-exposed-endpoint-management-hits-a-wall.html): 43% of IT teams spend 10+ hours weekly on manual endpoint tasks. Learn why partial automation creates dangerous gaps and what to do about it. (1,161 words)
- [Patch Tuesday February 2026: Critical Windows Vulnerabilities | Automox](/content/blog/patch-fix-tuesday-february-2026/index.html): February 2026 Patch Tuesday brings actively exploited Windows vulnerabilities including Remote Access Connection Manager DoS and SmartScreen bypasses. Learn what to patch first. (934 words)
- [January 2026 Patch Tuesday: Critical CVE Analysis | Automox](/content/blog/january-2026-patch-tuesday-cve-analysis/index.html): Automox security experts analyze January 2026 Patch Tuesday CVEs: Secure Boot certificate expiration, Windows Installer privilege escalation, and more. (941 words)
- [Patch Tuesday April 2026: Windows CVE Analysis | Automox](/content/blog/patch-fix-tuesday-april-2026/index.html): April 2026 Patch Tuesday covers a SQL Server elevation of privilege, an actively exploited SharePoint XSS flaw, and 80 Edge/Chromium vulnerabilities. CVSS scores, attack paths, and mitigation guidance. (1,344 words)
- [IT Spring Survival Guide: Must-Know Moments from Autonomous IT Live](/content/blog/must-know-moments-from-autonomous-it-live/index.html): Automox hosted its third Autonomous IT Live Show this week – and let’s just say, if spring cleaning your infrastructure sounds more appealing than tidying up your garage, this one’s for you.  (854 words)
- [Automox Happenings: March 2025](/content/blog/automox-happenings-march-2025/index.html): Stay informed with Automox's latest product updates, insightful content, and upcoming events. (381 words)
- [How to Migrate From Office 2016 and 2019 to Microsoft 365](/content/blog/how-to-migrate-from-office-2016-and-2019-to-microsoft-365.html): Office 2016 and 2019 lose support on October 14, 2025. See how to use Automox to automate your upgrade to Microsoft 365 and avoid security and compliance risks. (817 words)
- [Automox’s Response to the CVE Program News](/content/blog/automox-s-response-to-the-cve-program-news/index.html): The CVE program underwent a funding disruption after MITRE's contract ended, impacting global vulnerability tracking. Learn what this means for cybersecurity teams. (686 words)
- [BlueHammer: What You Need to Know and How to Respond | Automox](/content/blog/bluehammer-what-you-need-to-know-and-how-to-respond.html): BlueHammer is an unpatched Windows LPE zero-day. Deploy free, open-source Automox Worklets to harden and detect exploitation across your Windows fleet. (1,290 words)
- [Automox Delivers Zero-Day Patching Support for macOS Tahoe](/content/blog/automox-delivers-zero-day-patching-support-for-macos-tahoe-26.html): Automox delivers zero-day patching support for macOS Tahoe, helping IT teams quickly deploy critical security fixes and keep Mac fleets secure. (794 words)
- [Simplifying the Complex: Third-Party Patching](/content/blog/simplifying-the-complex-third-party-patching/index.html): Disvover how Automox simplifies third-party patch management across Windows, macOS, and Linux. (1,067 words)
- [Patch Tuesday August 2026: CVE Analysis | Automox](/content/blog/patch-fix-tuesday-august-2026/index.html): This month's Patch Tuesday leads with a vulnerability under active exploitation and a publicly disclosed flaw, alongside a batch of service-side cloud mitigations and at least one notable fix outside Windows. (1,335 words)
- [September 2025 Patch Tuesday Expert Analysis](/content/blog/patch-tuesday-september-2025/index.html): September Patch Tuesday is here — see what Automox cybersecurity experts say about attacker tactics and the steps you can take to reduce risk. (441 words)
- [7 Best Autonomous Endpoint Management Tools in 2026 | Automox](/content/blog/best-autonomous-endpoint-management-tools/index.html): Seven autonomous endpoint management tools ranked by what they fix on their own, with the guardrails, OS coverage, deployment model, and best fit for each. (1,169 words)
- [Autonomous Endpoint Management Isn't Just Efficiency, It's a Security Imperative | Automox](/content/blog/autonomous-endpoint-management-isnt-just-efficiency-its-a-security-imperative.html): With eCrime breakout times at 48 minutes and patch remediation at 32 days, autonomous endpoint management is now a security imperative, not just an efficiency play. (878 words)
- [9 Ways to Manage Third-Party Patching](/content/blog/top-ways-to-manage-third-party-patching/index.html): Learn 9 proven tips for automating third-party patching to secure endpoints, simplify updates, and reduce IT workload with cloud-native, policy-driven control. (737 words)
- [Patch Tuesday December 2025 Expert Analysis](/content/blog/patch-tuesday-december-2025/index.html): Automox experts review December’s threat landscape and the CVEs shaping year-end risk (899 words)
- [2026 State of Endpoint Management Report](/content/blog/the-2026-state-of-endpoint-management-report-is-here.html): The 2026 State of Endpoint Management report reveals how manual work, visibility gaps, and partial automation increase risk. Learn why teams are shifting toward autonomous endpoint management and how stronger automation, insight, and control can reduce effort and improve security. (603 words)
- [10 Tips to Handle Patch Tuesday Without the Chaos | Automox](/content/blog/best-way-to-handle-patch-tuesday/index.html): Patch Tuesday doesn't have to be a fire drill. Learn 10 practical strategies to automate patching, prioritize critical updates, and keep your team focused on strategic work. (911 words)
- [Worklet Roundup | March 2025](/content/blog/worklet-roundup-march-2025/index.html): Worklets to simplify your IT life. (517 words)
- [Third-Party Patch Management Guide: Best Practices and Tools | Automox](/content/blog/third-party-patch-management-guide/index.html): Learn third-party patch management best practices and compare the top 7 patching tools including Automox, Patch My PC, ManageEngine, and NinjaOne. (515 words)
- [When Opportunism Is the Strategy: Why Cyber Hygiene Matters More Right Now | Automox](/content/blog/when-opportunism-is-the-strategy-why-cyber-hygiene-matters.html): Iranian cyber actors target accessible organizations, not strategic ones. Learn why disciplined endpoint hygiene is your best defense against opportunistic attacks. (895 words)
- [Mitigating Unpatchables in Endpoint Risk Management | Automox](/content/blog/mitigating-unpatchables-endpoint-risk-management/index.html): Reduce your endpoint risk when no patch is available. Learn how automated vulnerability mitigation and drift control help you manage ongoing exposure. (1,004 words)
- [Four Tools to Streamline IT Tasks](/content/blog/worklet-roundup-april-2025/index.html): Discover how Automox Worklets™ can streamline your IT operations by automating routine tasks across macOS, Windows, and Linux devices. (389 words)
- [Enforce Linux Login Banner Compliance on Endpoints](/content/worklets/update-login-banners-linux/index.html): Enforce Linux login banner compliance with /etc/motd, /etc/issue, and sshd_config across endpoints. Meet CIS Benchmark 1.7.x and SOC 2 access warning rules. (940 words)
- [True Stories From the Hacker Underworld: Highlights from the Autonomous IT Live Show](/content/blog/live-show-october-2025/index.html): Host Landon Miles invited Jason Kikta, Automox’s CTO and CISO, to peel back the curtain on the psychology, methods, and motivations of hackers and attackers. (574 words)
- [Automox patches PDF24 Creator](/content/patching/software/pdf24-creator/index.html): PDF24 Creator is a free PDF suite for Windows from Geek Software GmbH. It adds a virtual PDF printer, so you can create a PDF from any application that can print. The suite also merges, splits, rearranges, and compresses PDFs, converts files to and from PDF, and adds searchable text to scanned documents with OCR. Files stay on the local computer, and an MSI installer is available for corporate distribution. (122 words)
- [AXU Alumni Challenge](/content/blog/axu-challenge-2025/index.html) (140 words)
- [Remove Slack from Every Windows Endpoint Profile](/content/worklets/uninstall-slack/index.html): Remove Slack from every Windows user profile on managed endpoints. Cleans %LOCALAPPDATA%\slack, Start Menu shortcuts, and Uninstall registry entries fleet-wide. (948 words)
- [Turnkey Results: Making Everyone on the Team an Expert | Automox](/content/blog/turnkey-results-explained/index.html): Turnkey Results uses data from 1.4 billion policy runs to build a personalized Blueprint that bridges the gap between your current state and your desired outcomes. (542 words)
- [Automox patches RemotePC Host](/content/patching/software/remotepc-host/index.html): RemotePC Host is the application you install on a computer so that it can be accessed remotely with RemotePC, the remote desktop software from IDrive. Once it is installed, you can connect to that computer from another computer, a mobile device, or a web browser. RemotePC supports file transfer, remote printing, session recording, and a whiteboard, and it encrypts sessions with TLS v1.2 and AES 256-bit encryption. (140 words)
- [Deploy SentinelOne EDR Agent to Windows Endpoints](/content/worklets/install-sentinelone-agent-windows/index.html): Deploy SentinelOne EDR agent to Windows endpoints with silent MSI installation, site token registration, and architecture-aware 32-bit or 64-bit selection. (839 words)
- [Disable X Windows](/content/worklets/disable-x-windows-linux/index.html): Switch Linux servers to multi-user.target and remove X Window System packages to shrink CVE exposure and meet CIS Benchmark hardening for headless workloads. (889 words)
- [Remove Unauthorized Users from Local Admin Groups](/content/worklets/remove-users-local-group/index.html): Remove unauthorized users from local Windows Administrators or Remote Desktop groups. Enforce an allowlist baseline with net localgroup across the fleet. (990 words)
- [Deploy SentinelOne EDR Agent to macOS Endpoints](/content/worklets/install-sentinelone-agent/index.html): Deploy the SentinelOne EDR agent to macOS endpoints with silent PKG install and site token registration. Close coverage gaps on re-imaged Macs and new hires. (876 words)
- [Automox patches Splashtop RMM](/content/patching/software/splashtop-rmm/index.html): Splashtop RMM, also called Splashtop for RMM, is a Splashtop application for Windows and macOS that shows a remote computer's screen for use with RMM tools. The application has a legacy compatible mode, on the Advanced tab of its options, for troubleshooting remote screens that look blurry, pixelated, or grainy. (102 words)
- [Patch AI Now Understands Your Environment | Automox](/content/blog/patch-ai-context-aware-environment/index.html): Patch AI now reads your Automox environment to answer questions about policies, endpoints, and patch status. See what you can ask and how it works. (441 words)
- [Matching Tenable Findings to Patches | Automox](/content/blog/behind-the-build-tenable-integration/index.html): Inside the Automox Tenable integration: matching findings to endpoints and packages, investigating gaps, and keeping patch actions under your control. (585 words)
- [Automox patches pgAdmin 4](/content/patching/software/pgadmin-4/index.html): pgAdmin 4 is an open-source tool for administering, developing, and monitoring PostgreSQL databases. It runs as a desktop application on Windows and macOS, and can also be deployed in server mode as a web application. It provides a graphical interface to create, browse, and maintain PostgreSQL objects, with the generated SQL kept visible. The Query Tool adds syntax highlighting, auto-completion, query history, and a graphical EXPLAIN. (104 words)
- [Reboot System](/content/worklets/reboot-system/index.html): Reboot Linux endpoints on a scheduled delay using shutdown -r. Clear pending-reboot state from kernel patches across RHEL, Debian, Ubuntu, and SLES fleets. (846 words)
- [Deploy Custom and Google Fonts to Windows Endpoints](/content/worklets/install-font/index.html): Deploy OpenType and TrueType fonts to Windows endpoints from Google Fonts or custom payloads. Standardize typography fleet-wide without per-laptop installs. (905 words)
- [Automox MCP Server 2.2: Governed AI for Endpoint Operations | Automox](/content/blog/automox-mcp-server-2-2/index.html): Automox MCP Server 2.2: governed access to the full Automox API, plus interactive review, severity-based patch policies, and live capability discovery. (631 words)
- [Disable Wake-on-LAN on macOS to Block Remote Wake](/content/worklets/disable-wake-network-access/index.html): Disable Wake for Network Access on macOS to block remote wake-on-LAN attacks. Enforce CIS Benchmark and NIST 800-53 power management baselines fleet-wide. (796 words)
- [Audit APFS Volume Encryption on macOS Endpoints](/content/worklets/user-storage-apfs-encrypted/index.html): Audit user-created APFS volumes on macOS for FileVault encryption. Catch unencrypted partitions before they become an audit finding or data-at-rest gap. (934 words)
- [Automox patches PDFgear](/content/patching/software/pdfgear/index.html): PDFgear is a PDF reader and editor for Windows. You can edit text and images in existing PDFs, annotate and sign documents, and merge, split, or organize pages. It converts PDFs to and from Word, Excel, PowerPoint, and image formats, in batches if needed. OCR makes scanned files editable, and a built-in AI assistant summarizes PDFs and extracts key information. (114 words)
- [Disconnect Mapped Network Drives on Windows Endpoints](/content/worklets/disconnect-mapped-drives/index.html): Clear stale mapped network drives from every Windows user profile by removing per-user Network registry keys. Remediates persistent dead shares across the fleet. (968 words)
- [Frontier-Pace Governance | Automox](/content/blog/frontier-pace-governance/index.html): AI supercharged vulnerability discovery, but exploitation hasn't caught up. Jason Kikta on frontier-pace governance and what to build during the lag. (488 words)
- [Automox patches SecureCRT](/content/patching/software/securecrt/index.html): SecureCRT is a terminal emulator from VanDyke Software that network administrators use to connect to remote servers over SSH1, SSH2, and Telnet, and to serial devices. It emulates terminal types including VT100, VT220, Xterm, and ANSI. A Session Manager stores saved sessions, which open in tabs or tiles. Python scripting and a script recorder automate repetitive tasks. (92 words)
- [Upgrade Legacy Edge to Chromium Edge on Windows](/content/worklets/windows-upgrade-edge-chromium/index.html): Upgrade legacy Microsoft Edge to Chromium-based Edge on Windows endpoints. Silent MSI install from the Edge for Business feed, with channel and version pinning. (989 words)
- [Testing Hosted MCP Fixes: Behind the Build | Automox](/content/blog/behind-the-build-hosted-mcp-server/index.html): How an Automox engineer tested proposed MCP Server fixes, reviewed them a second time, and added regression checks for a shared hosted service. (551 words)
- [Automox patches Microsoft .NET SDK](/content/patching/software/microsoft-net-sdk/index.html): Microsoft .NET SDK is a set of libraries and tools that developers use to create .NET applications and libraries on Windows. It contains the .NET CLI, the dotnet driver, and the runtime and libraries, including the .NET, ASP.NET Core, and .NET Desktop runtimes. Development workstations and build servers use it to build and run applications. Several SDK versions can coexist side by side on one endpoint. (135 words)
- [Automox patches TortoiseSVN](/content/patching/software/tortoisesvn/index.html): TortoiseSVN is a free, open-source Windows client for the Apache Subversion (SVN) version control system. It runs as a Windows shell extension, so you run Subversion commands from the Windows Explorer context menu. Icon overlays on files and folders show each item's status, such as normal, modified, or conflicted. It works with any development tools and any type of file, and it doesn't need the Subversion command line client. (117 words)
- [Automox patches Splashtop Streamer](/content/patching/software/splashtop-streamer/index.html): Splashtop Streamer is the software you install on a computer that you want to reach remotely. Once it's installed, you can access, view, and control that computer from another device with the Splashtop app. Splashtop lists this Streamer for its Remote Access (formerly Business Access), Remote Support (including SOS), and Enterprise plans. Splashtop Personal, On-Prem, and Classroom use separate Streamers. (112 words)
- [Audit Linux Memory Utilization Across Your Fleet](/content/worklets/memory-percentage-linux/index.html): Audit free memory on Linux endpoints as a percentage of installed RAM. Surface memory headroom across RHEL, Debian, Ubuntu, and SLES hosts at fleet scale. (788 words)
- [Audit Privileged Admin Accounts on Windows Endpoints](/content/worklets/audit-admin-accounts/index.html): Audit local Administrators group members on Windows endpoints with the Automox activity log. Surface stale contractor, vendor, and help-desk accounts. (833 words)
- [Reveal File Extensions in macOS Finder for Security](/content/worklets/turn-on-filename-extensions-mac/index.html): Reveal hidden file extensions in macOS Finder to stop attackers from disguising .exe, .dmg, and script payloads as documents. Enforced fleet-wide automatically. (895 words)
- [Enable Firewall Stealth Mode](/content/worklets/enable-firewall-stealth-mode/index.html): Enable macOS firewall stealth mode across the fleet to silently drop ICMP and TCP scan probes. Aligned to CIS macOS control 2.5.4.2 and the mSCP baseline. (846 words)
- [Automox patches Splunk Universal Forwarder](/content/patching/software/splunk-universal-forwarder/index.html): Splunk Universal Forwarder is a lightweight agent that streams data from a host to a receiver, usually a Splunk platform index. It monitors data in real time, tags it with source, source type, and host metadata, and supports buffering, compression, and SSL. On Windows, it can collect event logs, performance counters, and registry changes. It has no user interface, which helps minimize resource use. (118 words)
- [Automox patches Spotify](/content/patching/software/spotify/index.html): Spotify is an audio streaming service with a desktop app for Windows and macOS. It gives listeners access to more than 100 million tracks, plus podcasts and audiobooks. Users can build playlists, and on a Premium plan they can download albums, playlists, and podcasts for offline listening. Spotify also offers a free, ad-supported plan. (103 words)
- [Enforce Wi-Fi Status Visibility in macOS Menu Bar](/content/worklets/wifi-status-menu-bar/index.html): Enforce Wi-Fi status icon visibility in the macOS Menu Bar for every user account. Idempotent defaults baseline with ControlCenter restart on logged-in users. (863 words)
- [The Composition Point | Automox](/content/blog/the-composition-point/index.html): AI models are commoditizing. The real contest is the agent where IT and security work begins, and the trust to let it act. Jason Kikta on what comes next. (352 words)
- [Automox patches RubyMine](/content/patching/software/rubymine/index.html): RubyMine is an integrated development environment (IDE) from JetBrains for Ruby and Ruby on Rails development. It includes a graphical debugger for Ruby and JavaScript with breakpoints and step-by-step execution, plus a test runner with coding assistance. RubyMine supports Rails, RSpec, Rake, RuboCop, Docker, and Git. It also provides database management and SQL support directly within the IDE. (112 words)
- [Remove the Guest Home Folder from macOS Endpoints](/content/worklets/remove-guest-home-folder/index.html): Remove the leftover /Users/Guest home directory on macOS endpoints after disabling the Guest account. Close the residual-data gap fleet-wide with Automox. (870 words)
- [Enforce Mac App Store Auto-Updates for Applications](/content/worklets/app-store-updates-macos/index.html): Enforce Mac App Store auto-updates fleet-wide so installed apps patch themselves. Closes the App Store patching gap on every macOS endpoint in policy scope. (786 words)
- [Disable Root SSH Login to Harden Linux Endpoints](/content/worklets/disable-remote-root-login/index.html): Disable direct root SSH login on Linux endpoints by setting PermitRootLogin no in sshd_config. CIS Benchmark 5.2 and NIST 800-53 AC-6 hardening control. (937 words)
- [Automox patches Tableau Desktop](/content/patching/software/tableau-desktop/index.html): Tableau Desktop is a data visualization and analysis application from Tableau that people use to access, visualize, and analyze their data. Users connect to a data source and drag fields onto shelves and cards to build views. A workbook holds those views as worksheets, dashboards, and stories, and Show Me highlights the view types that suit the selected fields. Users can publish workbooks and data sources to Tableau Server or Tableau Cloud, where a team opens them in a web browser. (120 words)
- [Enforce Automatic macOS Software Updates on Endpoints](/content/worklets/enable-automatic-updates-macos/index.html): Enforce AutomaticCheckEnabled, AutomaticDownload, ConfigDataInstall, CriticalUpdateInstall, and AutomaticallyInstallMacOSUpdates on macOS endpoints fleet-wide. (979 words)
- [Disable Siri Voice Assistant on macOS Endpoints](/content/worklets/disable-siri-for-macos/index.html): Disable Apple Siri on macOS endpoints to enforce a privacy baseline aligned with CIS Benchmark 2.4.x. Blocks Hey Siri, lock-screen Siri, and menu-bar access. (617 words)
- [Automox patches SoapUI](/content/patching/software/soapui/index.html): SoapUI is a free, open-source functional testing tool for APIs and web services, made by SmartBear. It creates automated functional and regression tests for SOAP and REST services with drag and drop, and tests can be scripted in Groovy or JavaScript. It can also build load tests from existing functional tests, scan for vulnerabilities such as SQL injection, and mock SOAP and REST services before they are implemented. (116 words)
- [Preparation Is Governance Is Speed | Automox](/content/blog/preparation-is-governance-is-speed/index.html): Automox CEO Justin Talerico explains how a defined process and clear decision rights let his team respond to two critical PHP vulnerabilities overnight. (364 words)
- [Disable Home Sharing for Media on Mac Endpoints](/content/worklets/disable-media-sharing-mac/index.html): Stop Apple Home Sharing on Mac endpoints. Flips home-sharing-enabled to 0, clears the Apple ID, and restarts mediasharingd across every user on the endpoint. (817 words)
- [Harden macOS Login Window to Hide User Account List](/content/worklets/login-window-name-password/index.html): Harden macOS login windows with SHOWFULLNAME. Hide local user accounts, block enumeration at the lock screen, and align Mac fleets with the CIS Benchmark. (987 words)
- [Disable Guest Access to Shared Folders on macOS](/content/worklets/disable-guests-to-shared-folders-mac/index.html): Disable guest access to AFP and SMB shared folders on macOS. Block anonymous reads of share contents and harden file sharing against opportunistic recon. (699 words)
- [Automox patches TextExpander](/content/patching/software/textexpander/index.html): TextExpander is a text replacement app that inserts saved snippets in any application when a user types an abbreviation or searches for the snippet. Snippets can include formatted text, links, and images, along with fill-in fields such as a date picker or pop-up menu. Teams can share snippets so everyone works from the same content. The Windows version is also distributed as MSI packages for managed deployment. (123 words)
- [Automox patches ShareX](/content/patching/software/sharex/index.html): ShareX is a free, open-source screen capture and file sharing tool for Windows. It takes full-screen, active window, monitor, region, and scrolling captures, and it records the screen as video or GIF. After each capture, you can annotate it in the built-in editor, run OCR, or upload it to Amazon S3, Google Cloud Storage, or a custom uploader. Hotkeys start captures, and a workflow system chains the after-capture tasks. (105 words)
- [Disable macOS Password Hints to Block Login Attacks](/content/worklets/disable-show-password-hints-mac/index.html): Disable macOS password hints by setting RetriesUntilHint to 0 in com.apple.loginwindow. Close the CIS 5.7 finding fleet-wide and harden the login window. (894 words)
- [Enforce Password Complexity](/content/worklets/enforce-password-complexity/index.html): Enforce macOS password complexity with pwpolicy. Apply a 10-character minimum, mixed case, special character, 90-day expiration, lockout, and history depth. (845 words)
- [Harden SSH by Disabling Weak Algorithms on Linux](/content/worklets/disable-weak-sshd-algorithms/index.html): Harden OpenSSH on Linux by writing a strong Ciphers, KexAlgorithms, and MACs allowlist to sshd_config. Closes CIS 5.2.x and NIST 800-53 scanner findings. (922 words)
- [Block Apple Ad Tracking, Personalized Ads on macOS](/content/worklets/limit-ad-tracking-mac/index.html): Block Apple ad tracking on macOS endpoints. Disable personalized advertising via com.apple.AdLib.plist to enforce a fleet-wide privacy baseline for users. (1,048 words)
- [Automox patches Python](/content/patching/software/python/index.html): Python is an open-source programming language used for web development, scientific computing, AI and machine learning, and system administration. It's an interpreted language with an extensive standard library, and C or C++ code can extend it with new functions and data types. Windows installers are available for 64-bit, 32-bit, and ARM64 systems, and the full installer includes pip and IDLE by default. (113 words)
- [Automox patches Snake Tail](/content/patching/software/snake-tail/index.html): Snake Tail is a Windows tail utility for monitoring growing text log files and Windows Event Logs. It offers MDI, tabbed, and floating window modes and color-codes log lines that match keywords, including regular expressions. It follows circular logs that are truncated or renamed, and it tails the latest file in a log directory using wildcards. It is released under the GNU GPL v3 license. (114 words)
- [Disable macOS Guest Account to Block Anonymous Login](/content/worklets/disable-guest-account-login-mac/index.html): Disable the macOS guest account at the login window. Block anonymous, credential-free access and meet CIS 6.1.2 and NIST 800-53 AC-2 hardening controls. (787 words)
- [Disable Remote DVD and CD Sharing on macOS Endpoints](/content/worklets/disable-dvd-cd-sharing-mac/index.html): Disable the macOS ODSAgent service to stop remote DVD and CD sharing. Automated launchctl-based hardening for the Mac fleet with idempotent evaluation. (830 words)
- [Automox patches Yubico Authenticator](/content/patching/software/yubico-authenticator/index.html): Yubico Authenticator is an application that generates OATH one-time codes (TOTP and HOTP) for two-factor authentication from credentials stored on a YubiKey. The YubiKey's secure element holds those credentials, and they can't be extracted once stored. You can add accounts by QR code or by entering the secret key manually. You can also protect the YubiKey's OATH application with a password. (115 words)
- [Enable Mac Terminal Secure Keyboard Entry Protection](/content/worklets/enable-secure-keyboard-entry-mac/index.html): Protect macOS Terminal sessions from keylogger capture of passwords, SSH passphrases, and sudo credentials. CIS-aligned Secure Keyboard Entry hardening at scale. (843 words)
- [Deploy Microsoft 365 Apps Suite to macOS Endpoints](/content/worklets/download-install-office365/index.html): Deploy Microsoft 365 Apps to macOS endpoints with a silent pkg install pulled from Microsoft's official CDN. Reinstall Word, Excel, Outlook fleet-wide. (945 words)
- [Disable Sending Diagnostic Data to Apple](/content/worklets/disable-sending-diagnostics-macos/index.html): Disable macOS diagnostic data transmission to Apple by writing AutoSubmit false in DiagnosticMessagesHistory.plist. Meets CIS 2.6.1 and GDPR baselines. (770 words)
- [Disable Content Caching on macOS to Harden Endpoints](/content/worklets/disable-content-caching-mac/index.html): Disable Apple Content Caching on macOS endpoints. Stop Macs from serving updates, App Store downloads, and iCloud data on untrusted networks at fleet scale. (796 words)
- [Automox patches ChatGPT](/content/patching/software/chatgpt/index.html): ChatGPT is OpenAI's conversational AI, offered as a desktop app for macOS that combines Chat, Work, and Codex. Chat gives conversational assistance with everyday questions. Work is an agent for longer, multi-step tasks that produce finished deliverables such as documents, presentations, and spreadsheets. Codex is dedicated to software development and technical work. (102 words)
- [Disable Screen Sharing](/content/worklets/disable-screen-sharing-mac/index.html): Disable the macOS screensharing launch daemon to block VNC-based remote access, shrink the attack surface, and meet CIS Benchmark 2.4.12 across your fleet. (862 words)
- [Install Latest Agent On Systems With Old Agents](/content/worklets/latest-agent-install/index.html): A scheduled task fires 15 seconds after Worklet exit so the MSI upgrades amagent without killing the process that launched it. Keeps Windows fleets current. (994 words)
- [Disable Apple Remote Desktop on macOS Endpoints](/content/worklets/disable-remote-management-macos/index.html): Disable Apple Remote Desktop on macOS endpoints by stopping ARDAgent with kickstart. Harden against unauthorized remote access and align with CIS 2.4.13. (791 words)
- [Enable or Disable macOS Location Services Baseline](/content/worklets/location-services-enable-disable/index.html): Enforce macOS Location Services state with defaults and the locationd plist. Hold a privacy baseline on Mac fleets and catch drift before the next audit. (931 words)
- [Enforce Authoritative NTP Sync on macOS Endpoints](/content/worklets/set-date-time-macos/index.html): Enforce automatic NTP time sync on macOS endpoints with systemsetup. Stop Kerberos and SSO authentication failures caused by clock drift across the fleet. (817 words)
- [Automox patches RStudio Desktop](/content/patching/software/rstudio-desktop/index.html): RStudio Desktop is an integrated development environment (IDE) from Posit for writing code, exploring data, and sharing results in R, with support for Python. It pairs a source editor that has syntax highlighting and code completion with a console and tools for plotting, viewing history, and managing the workspace. It also includes an interactive debugger, project management, and a Visual Markdown Editor for Quarto and R Markdown documents. (122 words)
- [Automox patches Signal Desktop](/content/patching/software/signal-desktop/index.html): Signal Desktop is the computer app for the Signal messenger. It links to Signal on an Android phone or iPhone, and the phone scans a QR code that Signal Desktop shows to pair them. Once linked, you can send and receive messages from your computer, and your chats and the last 45 days of media can sync from the phone. Signal uses end-to-end encryption built on the open source Signal Protocol. (123 words)
- [Enforce Idle Lock and Screensaver Policy on Windows](/content/worklets/change-screensaver-windows/index.html): Enforce idle lock and screensaver policy on every Windows user profile, including logged-out hives, with a CIS-aligned idle timeout and password on wake. (919 words)
- [Disable Screen Saver Hot Corners](/content/worklets/disable-screen-saver-hot-corners-mac/index.html): Block macOS screen saver hot corners that let users suspend automatic screen lock. Enforces the CIS Benchmark screen saver baseline across the Mac fleet. (852 words)
- [Retrieve Windows Event Viewer Errors for Diagnostics](/content/worklets/get-eventviewer-errors/index.html): Pull recent Application and System event log errors from Windows endpoints with Get-EventLog and surface them in the Automox Activity Log for fleet triage. (937 words)
- [Disable Remote Login to Block SSH on macOS Endpoints](/content/worklets/disable-remote-login-macos/index.html): Disable Remote Login on macOS endpoints to block SSH port 22 sessions, shrink the fleet attack surface, and align endpoints with CIS macOS Benchmark hardening. (831 words)
- [Force Patch Microsoft 365 Apps on Windows Endpoints](/content/worklets/force-m365-apps-update/index.html): Force-patch Microsoft 365 Apps on Windows endpoints with the Office Deployment Tool. Update Click-to-Run Office across your fleet without waiting on users. (1,040 words)
- [Disable Internet Sharing on macOS to Block Hotspots](/content/worklets/disable-internet-sharing-mac/index.html): Disable Internet Sharing on macOS endpoints to block rogue Wi-Fi hotspots, eliminate NAT exposure, and reduce CIS Benchmark 2.4.4 audit findings on Mac fleets. (739 words)
- [Automox Blog: ITOps & Cybersecurity News](/content/blog/index.html): Read the latest updates from the Automox team on vulnerability management, endpoint security, and more. Subscribe for cybersecurity news in your inbox. (60 words)
- [Disable macOS Printer Sharing to Block CUPS Attacks](/content/worklets/disable-printer-sharing-mac/index.html): Disable printer sharing on macOS endpoints with cupsctl to block CUPS exploitation. Close the IPP listener and align with CIS macOS Benchmark hardening. (790 words)
- [Report macOS Uptime and Reboot Status to Activity Log](/content/worklets/display-uptime-macos/index.html): Audit macOS endpoint uptime across your fleet with the native uptime command. Spot Macs that missed a reboot after a patch and Macs bouncing too often. (940 words)
- [Upgrade FileCloud Sync Classic on Windows Endpoints](/content/worklets/upgrade-file-cloud-sync/index.html): Upgrade FileCloud Sync Classic on Windows endpoints to a target MSI build. A registry version check skips endpoints already on the version you specify. (924 words)
- [Deploy RingCentral Unified Communications to macOS](/content/worklets/install-ringcentral-mac/index.html): Deploy RingCentral unified communications to macOS endpoints from a signed PKG. Skip-if-running detection, version baseline pinning, FixNow on-demand support. (795 words)
- [Deploy Google Chrome to macOS Endpoints](/content/worklets/download-install-chrome/index.html): Install Google Chrome on macOS via the universal DMG from dl.google.com. Covers Intel and Apple Silicon Macs with idempotent reinstall logic for self-healing. (779 words)
- [Enforce Screen Saver Baseline on macOS Endpoints](/content/worklets/set-screensaver-macos/index.html): Configure CIS-aligned macOS screen saver settings fleet-wide: idle timeout, module, and image source locked to your policy on every managed Mac endpoint. (901 words)
- [Automox patches Zoom VDI Client](/content/patching/software/zoom-vdi-client/index.html): Zoom VDI Client is the Zoom Workplace VDI app, which is installed on a Windows virtual desktop to run Zoom meetings. It works with the Zoom VDI Plugin on the user's endpoint, which processes meeting audio and video on that endpoint's hardware instead of on the virtual desktop. The client shows the meeting toolbar and participant list. It runs in Citrix, Omnissa Horizon, and Windows Remote Desktop environments and installs from an MSI file that Microsoft Intune or System Center Configuration Manager can deploy. (124 words)
- [Patch Python Runtime Vulnerabilities on Windows](/content/worklets/upgrade-python-windows/index.html): Patch Python runtime CVEs on Windows endpoints. Upgrade both 32-bit and 64-bit Python installs in place via user-context scheduled tasks across the fleet. (876 words)
- [Enforce macOS Firewall to Block Inbound Connections](/content/worklets/enable-firewall-macos/index.html): Turn on the macOS Application Layer Firewall across the fleet to block unauthorized inbound connections and restore CIS Benchmark 2.5.x compliance automatically. (812 words)
- [Deploy Microsoft Remote Desktop to Mac Endpoints](/content/worklets/download-install-rdp/index.html): Deploy Microsoft Remote Desktop to Mac endpoints for RDP access to Windows Server, Azure Virtual Desktop, and Windows 365 Cloud PC. Automated PKG install. (864 words)
- [Force Password Reset at Next Logon on Windows Hosts](/content/worklets/user-password-reset-requirement/index.html): Force local Windows accounts to reset passwords at next logon for CIS, NIST, and HIPAA compliance. Automated enforcement across your fleet without tickets. (979 words)
- [Automox patches Zoom VDI Plugin](/content/patching/software/zoom-vdi-plugin/index.html): Zoom VDI Plugin is the Zoom component installed on a user's endpoint, such as a thin client or local PC, for meetings held in a virtual desktop session. It keeps its own direct connection to the meeting and processes audio and video on the endpoint's hardware instead of on the VDI server. It pairs with the Zoom VDI Client on the virtual desktop. The plugin installs as an MSI on Windows or a PKG on macOS, after the endpoint's virtual desktop client, such as Citrix Workspace or Omnissa Horizon Client. (129 words)
- [What Is a Use-After-Free Vulnerability? | Automox](/content/blog/vulnerability-definition-use-after-free/index.html): Learn how use-after-free (CWE-416) vulnerabilities work, see real-world CVE examples, and discover detection and remediation strategies to protect your endpoints. (1,706 words)
- [Block Microsoft Office Macros on Windows Endpoints](/content/worklets/disable-office-macros/index.html): Block Microsoft Office macro execution from internet downloads on Windows. Stop Emotet, Qakbot, and IcedID phishing payloads across every user profile. (873 words)
- [Deploy Microsoft 365 Apps to Windows](/content/worklets/install-m365-apps/index.html): Deploy Microsoft 365 Apps for Enterprise to Windows endpoints with the Office Deployment Tool. Configure channel, app exclusions, and 32-bit or 64-bit setup. (887 words)
- [Uninstall Cisco AnyConnect Secure Client on Windows](/content/worklets/uninstall-cisco-anyconnect/index.html): Remove Cisco AnyConnect Secure Mobility Client from Windows endpoints. The Worklet runs msiexec /x, clears ProgramData files, and cleans user profiles. (793 words)
- [Patch Oracle VirtualBox to Target Version on Windows](/content/worklets/upgrade-virtualbox/index.html): Upgrade Oracle VirtualBox on Windows endpoints to a target version. Silent installer, registry-based version check, no manual reinstall per developer laptop. (845 words)
- [Disable LLMNR on Linux Endpoints to Block Poisoning](/content/worklets/disable-llmnr-settings-linux/index.html): Disable LLMNR on Linux endpoints to block Responder-style credential poisoning. Harden /etc/systemd/resolved.conf with LLMNR=no across the fleet automatically. (881 words)
- [Remove Outdated App Versions From Windows Endpoints](/content/worklets/version-specific-uninstall/index.html): Remove outdated application versions from Windows endpoints with version-targeted detection across 64-bit, 32-bit, and per-user uninstall registry hives. (937 words)
- [Enable Locate Database](/content/worklets/enable-locate-database/index.html): Activate the locate database on Mac endpoints for millisecond file search from the terminal. Automated launchd activation across the macOS fleet, no SSH. (812 words)
- [Enforce Corporate Desktop Wallpaper on Mac Endpoints](/content/worklets/change-wallpaper-macos/index.html): Enforce a standard desktop wallpaper across macOS endpoints. Push branding, security contacts, or maintenance notices to every Mac without per-user steps. (819 words)
- [Remove Unauthorized Applications from macOS Endpoints](/content/worklets/enforced-app-uninstall/index.html): Remove unauthorized apps from macOS endpoints on a schedule. Uninstall named .app bundles from /Applications and re-remove on every Worklet evaluation. (776 words)
- [Enforce macOS Hostname to Hardware Serial Number](/content/worklets/change-hostname-macos/index.html): Enforce HostName, LocalHostName, and ComputerName on macOS endpoints to match the hardware serial number for fleet-wide asset tracking and log correlation. (424 words)
- [Set Delivery Optimization](/content/worklets/set-delivery-optimization/index.html): Enforce Windows Delivery Optimization registry settings across endpoints. Cap update bandwidth, set DODownloadMode, and pin peer caching policy without GPO. (921 words)
- [Enable Gatekeeper](/content/worklets/enable-gatekeeper-mac/index.html): Re-enable Gatekeeper on macOS endpoints to block unsigned and unnotarized apps. Restores spctl assessments and aligns the fleet with CIS Benchmark 2.6.x. (791 words)
- [Kill Open Application Processes on macOS Endpoints](/content/worklets/kill-open-process/index.html): Kill a named macOS process by PID before installers run. Uses pgrep and kill to clear locked application bundles for Zoom, Chrome, Slack, and Teams upgrades. (966 words)
- [Enforce Active Windows Power Profile on Endpoints](/content/worklets/change-power-scheme-windows/index.html): Enforce the active Windows power profile on every endpoint with Automox. Lock in High Performance, Balanced, or Power Saver mode through powercfg automation. (900 words)
- [Disable Bluetooth](/content/worklets/disable-bluetooth-macos/index.html): Disable Bluetooth on idle macOS endpoints to shrink the wireless attack surface from BlueBorne, KNOB, and BIAS without disrupting paired keyboard users. (746 words)
- [Deploy Any Mac Application from PKG or DMG Files](/content/worklets/app-installer/index.html): Install Mac applications from PKG or DMG files across your fleet. Mounts DMGs with hdiutil, runs PKGs with the installer command, and verifies on disk. (785 words)
- [Enforce BitLocker Encryption](/content/worklets/enforce-bitlocker-encryption/index.html): Enforce BitLocker drive encryption on Windows endpoints with TPM, AES-128, AES-256, and recovery key or 48-character password protectors for compliance. (989 words)
- [Show or Hide the Office Insiders Button on Windows](/content/worklets/show-hide-office-button/index.html): Control Office Insiders button visibility across Windows endpoints. Sets InsiderSlabBehavior under HKCU Software\Policies\Microsoft\Office\16.0\Common for each active user. (648 words)
- [Enforce Microsoft Office Update Channel on Windows](/content/worklets/configure-office-update-channel/index.html): Pin the Microsoft Office Click-to-Run update channel on Windows endpoints. Lock builds to Current, Monthly Enterprise, or Semi-Annual rings via updatebranch. (786 words)
- [Disable PowerShell V2 Downgrade Attacks on Windows 10](/content/worklets/disable-powershell-v2-windows/index.html): Disable PowerShell v2 on Windows 10 endpoints to block downgrade attacks. Force every session into the modern engine with script block logging and AMSI active. (879 words)
- [Enforce LAN Manager Authentication Level on Windows](/content/worklets/lan-manager-authentication-level/index.html): Set LMCompatibilityLevel 5 at HKLM\SYSTEM\CurrentControlSet\Control\Lsa to block LM and NTLMv1 on every Windows endpoint. Aligns with CIS Benchmark 2.3.11.7. (888 words)
- [Disable USB Storage](/content/worklets/disable-usb-storage/index.html): Disable USB mass storage on Windows endpoints. The Worklet writes Deny_Read and Deny_Write policy keys to block thumb drives and external drives at scale. (1,009 words)
- [Disable SSH Password Authentication on Linux Hosts](/content/worklets/disable-ssh-password-auth-linux/index.html): Disable SSH password authentication on Linux endpoints. Edits sshd_config, validates with sshd -t, restarts sshd. CIS 5.x and NIST 800-53 AC-17 aligned. (886 words)
- [Report Free Disk Space Across Windows Endpoints](/content/worklets/free-disk-space/index.html): Audit free disk space on Windows fixed drives via Win32_LogicalDisk and flag any endpoint that falls below your configurable percentage threshold for storage. (793 words)
- [Schedule Targeted Reboot in Defined Window on Windows](/content/worklets/targeted-reboot-defined-timeframe/index.html): Schedule a forced Windows reboot inside a defined start and end window only when users are idle. Apply pending Windows Update patches without disruption. (1,007 words)
- [Get Reboot History](/content/worklets/get-reboot-history/index.html): Audit Windows reboot history with timestamps, users, and reason text from event ID 1074. Verify patch reboots and surface restart gaps at fleet scale. (811 words)
- [Uninstall Windows Applications by Display Name Fast](/content/worklets/application-uninstall-by-name/index.html): Uninstall Windows applications by display name across your Windows endpoints. Removes machine and per-user installs without knowing the uninstall command. (920 words)
- [Audit BitLocker Encryption Compliance on Windows](/content/worklets/bitlocker-compliance-check/index.html): Audit BitLocker drive encryption on Windows 8 and later endpoints. Non-compliant volumes surface in the Automox Activity Log with no changes applied to drives. (739 words)
- [Deploy Microsoft KB Security Patches via MSP Files](/content/worklets/deploy-msp-based-kb/index.html): Deploy Microsoft KB security patches packaged as MSP files to Windows endpoints. Skip the WSUS cycle for Exchange, SharePoint, and zero-day vendor patches. (1,000 words)
- [Disable Remote Desktop Protocol on Windows Machines](/content/worklets/disable-remote-desktop-protocol/index.html): Disable RDP on Windows endpoints to shut down the ransomware-favorite initial access vector. Sets fDenyTSConnections=1 and reports compliance to Automox. (939 words)
- [Remove Unauthorized Applications from Linux Endpoints](/content/worklets/enforced-uninstall-applications-linux/index.html): Remove a named package from Ubuntu, Fedora, Alpine, and Gentoo endpoints using dpkg, dnf, apk, or emerge. Enforce a Linux application baseline fleet-wide. (810 words)
- [Schedule Logon-Triggered Tasks on Windows Endpoints](/content/worklets/create-scheduled-task-windows/index.html): Deploy logon-triggered scheduled tasks across Windows endpoints using the PowerShell Schedule.Service COM API. Run user-context scripts at scale, without GPO. (881 words)
- [Harden Windows Password Complexity and Length Policy](/content/worklets/set-password-complexity/index.html): Harden Windows password complexity, length, history, and reversible encryption settings via secedit and net accounts. Align local policy with CIS Benchmarks. (902 words)
- [Fix Windows Update Issues by Resetting Components](/content/worklets/reset-windows-update-settings/index.html): Fix Windows Update failures by resetting wuauserv, BITS, appidsvc, and cryptsvc, renaming SoftwareDistribution and catroot2, then forcing a fresh scan. (956 words)
- [Rollback Windows Patches](/content/worklets/rollback-windows-patches/index.html): Roll back problematic Windows KB updates with DISM Remove-WindowsPackage. Reverse a bad patch across Windows 10 endpoints and restore fleet stability fast. (828 words)
- [Why Automox | Patch, Mitigate, and Govern Every Endpoint](/content/why-automox/index.html): Patch what's patchable. Mitigate what isn't. Govern every endpoint. Autonomous Endpoint Management across Windows, macOS, and Linux — 362% ROI., Explore our platform (785 words)
- [Deploy Network Printers to Windows User Endpoints](/content/worklets/add-network-printer/index.html): Deploy network printers to Windows endpoints through a scheduled task at user logon. Roll out shared printers fleet-wide without Group Policy or print servers. (781 words)
- [Enforce Auto-Patch Downloads on Windows Endpoints](/content/worklets/automatic-patch-update-configuration/index.html): Enforce the Windows Update AU policy on Windows endpoints. Writes AUOptions and AutoInstallMinorUpdates so patches download in background and wait for install. (792 words)
- [Purge Chrome and Internet Explorer Cookies on Windows](/content/worklets/clear-cookies-chrome-ie/index.html): Purge Chrome and Internet Explorer cookies, cache, and browsing history on Windows endpoints. Schedule fleet-wide cleanup with configurable retention. (787 words)
- [Deprecated 64-Bit MSI Installer Worklet for Windows](/content/worklets/msi-software-installation-64bit/index.html): Deprecated 64-bit MSI installer Worklet for Windows. Use MSI Software Installation (System Wide-All Users) to deploy MSI packages and report exit codes. (690 words)
- [Higher Education Management Software - College & University Management Systems | Automox](/content/solutions/industries/higher-education/index.html): Get full control of your endpoints with Automox's easy-to-use, cloud-based solution. Learn about our higher education management software for colleges and universities! (628 words)
- [Dirty Frag: What You Need to Know and How to Respond | Automox](/content/blog/dirty-frag-what-you-need-to-know-and-how-to-respond.html): Dirty Frag is an unpatched Linux LPE chain affecting esp4, esp6, ipcomp4, ipcomp6, and rxrpc kernel modules. Deploy the open-source Automox Worklet to mitigate across your Linux fleet. (1,585 words)
- [PHP2Shell: What You Need to Know and How to Respond | Automox](/content/blog/php2shell-what-you-need-to-know-and-how-to-respond/index.html): PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets unauthenticated attackers run code on PHP servers. Patch now, restart PHP, and check exposed servers. (1,107 words)
- [Audit LibRaw Security Update Status for CVE-2026-20884 on Linux](/content/worklets/audit-libraw-cve-2026-20884-update-status-linux/index.html): A crafted DNG file can trigger a heap buffer overflow in LibRaw (CVE-2026-20884). Find Linux endpoints missing their distro's fix and get the install command. (1,114 words)
- [Disable the Bluetooth Kernel Module to Mitigate CVE-2026-31512 on Linux](/content/worklets/mitigate-cve-2026-31512-disable-bluetooth-kernel-module-linux.html): Block the Linux Bluetooth kernel module via modprobe.d to mitigate CVE-2026-31512 on servers without a kernel fix. Includes backup, post-checks, and rollback. (1,178 words)
- [Blacklist the squashfs Kernel Module to Mitigate CVE-2026-23388 on Linux](/content/worklets/mitigate-cve-2026-23388-blacklist-squashfs-kernel-module-linux.html): A crafted Squashfs image can crash Linux endpoints via CVE-2026-23388. Temporarily block squashfs auto-loading on endpoints without snapd or a built-in driver. (1,015 words)
- [Diagnose Network Connectivity on Windows Endpoints](/content/worklets/run-network-diagnostics/index.html): Diagnose Windows network issues with ping, tracert, Wi-Fi signal, and CPU and memory metrics. Results stream to the Activity Log for fleet-wide triage by IT. (1,169 words)
- [Block cPanel and WHM Ports 2083 and 2087 to Mitigate CVE-2026-41940 on Linux](/content/worklets/mitigate-cve-2026-41940-block-cpanel-whm-ports-linux.html): CVE-2026-41940 is a KEV-listed authentication bypass in cPanel and WHM. Block TCP ports 2083 and 2087 on unpatched Linux servers while you schedule the update. (1,073 words)
- [Automox Pricing | Automated Patching, Configuration, and Control | Get a Demo!](/content/pricing/index.html): Automox is easy to buy and even easier to use. Start saving time today. (682 words)
- [Enforce Account Lockout Policy on Windows Endpoints](/content/worklets/set-account-lockout-windows/index.html): Enforce account lockout thresholds on Windows endpoints to block brute force credential attacks. Set bad-count, duration, and reset window via secedit. (790 words)
- [Restrict External Access to SharePoint Central Administration to Mitigate CVE-2026-32201 on Windows](/content/worklets/mitigate-cve-2026-32201-restrict-sharepoint-central-admin-windows.html): Add a Windows Firewall rule that blocks external sources from SharePoint Central Administration on Windows Server, following CISA guidance for CVE-2026-32201. (1,187 words)
- [Disable Git daemon.uploadArch to Mitigate CVE-2022-41903 on Windows](/content/worklets/mitigate-cve-2022-41903-git-daemon-uploadarch-windows.html): Apply the Git advisory workaround for CVE-2022-41903 on Windows by setting daemon.uploadArch to false, blocking git daemon archive uploads on every endpoint. (914 words)
- [Automox FAQs](/content/faq/index.html): Learn everything you need about Automox's cloud-based platform in our FAQs. (1,696 words)
- [Audit Windows Update Event Logs on Windows Endpoints](/content/worklets/windows-update-events/index.html): Audit Windows Update Client event logs across endpoints with Get-WinEvent. Surface install successes, failures, and pending reboots in the Automox Activity Log. (1,070 words)
- [Migrate Slack to MSIX on Windows Endpoints](/content/worklets/migrate-slack-to-msix-windows/index.html): Replace legacy MSI and Squirrel Slack installs with the provisioned Slack MSIX on Windows endpoints. Includes per-profile cleanup and x64 or arm64 support. (924 words)
- [Remove Legacy CDBurnerXP from Windows Endpoints](/content/worklets/uninstall-cdburnerxp-windows/index.html): Remove legacy CDBurnerXP optical disc software from Windows endpoints. Silent uninstall via UninstallString and msiexec /x across 32-bit and 64-bit hives. (878 words)
- [Modify HKEY_USERS Registry for Windows User Accounts](/content/worklets/modify-hkey-users/index.html): Modify HKEY_USERS registry values for every active Windows profile, including unloaded ntuser.dat hives. Reach every SID on every endpoint in one pass. (964 words)
- [Automox Partners | Autonomous Endpoint Management](/content/partners/index.html): Bring automated patching, configuration, and policy enforcement to your customers. Resell Automox, deliver it as a managed service, or integrate it into your platform. (524 words)
- [Set the VIPS_BLOCK_UNTRUSTED Environment Variable to Mitigate CVE-2026-66066 on Windows](/content/worklets/mitigate-cve-2026-66066-vips-environment-variable-windows.html): CVE-2026-66066 lets a crafted upload read Rails secrets. Block untrusted libvips operations on Windows as a temporary workaround until you patch Active Storage. (862 words)
- [Block the Unauthenticated Docker Remote API Port 2375 to Mitigate Tenable Plugin 124029 on macOS](/content/worklets/mitigate-tenable-124029-block-docker-remote-api-port-2375-macos.html): Tenable plugin 124029 flags an exposed Docker Remote API. Block inbound TCP port 2375 on macOS with a PF rule that spares localhost, turning PF on if needed. (1,197 words)
- [Detect Windows Update Group Policies on Windows Endpoints](/content/worklets/detect-windows-update-group-policies-windows/index.html): Report the Group Policy Objects and registry values that control Windows Update on your endpoints, including WSUS, deferral, pause, and channel settings. (715 words)
- [Audit Ray Security Update Status for CVE-2025-62593 on macOS](/content/worklets/audit-ray-cve-2025-62593-update-status-macos/index.html): Find macOS endpoints with Ray older than 2.52.0, affected by the CVE-2025-62593 dashboard RCE, and get the owner and pip upgrade command for each flagged copy. (1,151 words)
- [Mitigate CVE-2018-0886 CredSSP RCE Flaw on Windows](/content/worklets/mitigate-credssp-rce-vulnerability-windows/index.html): Mitigate CVE-2018-0886 on Windows endpoints by enforcing AllowEncryptionOracle=0. Block CredSSP credential relay over RDP, WinRM, and PowerShell remoting. (878 words)
- [Future-Proofing IT & Cybersecurity | Automox](/content/blog/future-proofing-it-and-cybersecurity/index.html): Automox CEO Justin Talerico on full-flex endpoint management: agnostic ingestion, MCP-driven command and control, AI-speed mitigations, and agentless fixes. (969 words)
- [How Automox Works | Autonomous Endpoint Management](/content/how-it-works/index.html): See how Automox automates patching, deploys Worklet mitigations, and uses Turnkey Results to align endpoint execution to your goals. (519 words)
- [Disable DIGEST Authentication in Apache Tomcat to Mitigate CVE-2026-43512 on Linux](/content/worklets/mitigate-cve-2026-43512-disable-tomcat-digest-auth-linux.html): Mitigate CVE-2026-43512 on Linux by switching Tomcat DIGEST authentication to NONE on unpatched builds. The Worklet backs up each file and restarts Tomcat. (1,141 words)
- [Disable the Apache Tomcat Examples Web Application to Mitigate CVE-2026-66299 on Windows](/content/worklets/mitigate-cve-2026-66299-disable-tomcat-examples-windows.html): CVE-2026-66299 lives in the WebSocket chat example inside Tomcat's examples app. Move that app out of webapps on affected Windows endpoints until you upgrade. (891 words)
- [Services and Support Plans | Automox](/content/platform/services-support-plans/index.html): With three support plans and available services, our teams are here to help ensure you get the most out of your Automox investment. (715 words)
- [Audit Available Package Updates on Linux Endpoints](/content/worklets/report-available-package-updates-linux/index.html): Audit available package updates on Linux endpoints. Inventory the patch backlog from apt and yum with CSV reporting and an optional automatic upgrade. (857 words)
- [Remove the EEMS URL Rewrite Mitigation for CVE-2026-42897 from Exchange OWA on Windows](/content/worklets/remove-cve-2026-42897-eems-owa-url-rewrite-mitigation-windows.html): The July 2026 Exchange SU leaves the CVE-2026-42897 EEMS mitigation in OWA. Remove it from Windows Exchange servers with that SU to clear its side effects. (1,036 words)
- [Disable Shells on Linux System Accounts Below 1000](/content/worklets/set-accounts-nologin/index.html): Lock Linux system accounts below UID 1000 and set their shells to /sbin/nologin. Enforce CIS Benchmark 5.4.2 across RHEL, CentOS, Debian, and Ubuntu fleets. (901 words)
- [Vulnerability Disclosure Program | Automox Security | Radically Efficient](/content/platform/security/responsible-disclosure/index.html): At Automox, we deeply value the importance of security research and the significant contributions it makes towards a secure future... (1,214 words)
- [Deploy think-cell PowerPoint Plug-in to Windows](/content/worklets/install-thinkcell-windows/index.html): think-cell on Windows: silent MSI install, Shared Secret license key activation, and registry verification to confirm the deployment across your fleet. (891 words)
- [Monitor Linux Filesystem Capacity Across Endpoints](/content/worklets/check-filesystem-capacities-linux/index.html): Scan Linux filesystem capacity on every endpoint and surface any mount above 90% usage. Catch storage exhaustion before logs, databases, and apps fail. (867 words)
- [Patch Linux Endpoints with Custom Package Exclusions](/content/worklets/apply-updates-with-exceptions-file-linux/index.html): Patch Linux endpoints fleet-wide while excluding specific packages from the run. Apply security updates without touching kernels or pinned vendor packages. (1,014 words)
- [CrowdStrike Deployment | Automox IT Operations | Avert Attacks](/content/automox-and/deployment/crowdstrike/index.html): Crowdstrike's cloud-native endpoint protection platform can stop breaches. Automox helps avert attacks altogether. Up-level your endpoint protection. Easy deployment... (560 words)
- [Deploy Dialpad Machine-Wide Installer to Windows](/content/worklets/install-dialpad-machine-wide-windows/index.html): Deploy the Dialpad Machine-Wide MSI silently to Windows endpoints. Detects existing installs via registry and selects the x64 or x86 build automatically. (736 words)
- [Log4j/Log4Shell Vulnerability Remediation, Variants, & Timeline](/content/resources/log4shell/index.html): Log4Shell, the Apache Log4j zero-day vulnerability, remains a critical concern. Here's how to mitigate risk to your infrastructure and protect your endpoints. (571 words)
- [Disable ActiveX Controls in Office 2007 to Mitigate CVE-2010-0249 on Windows](/content/worklets/mitigate-cve-2010-0249-disable-activex-office-2007-windows.html): CVE-2010-0249 is the KEV-listed Internet Explorer zero-day from Operation Aurora. This Worklet applies the Office 2007 ActiveX workaround on Windows endpoints. (627 words)
- [K-12 IT Solutions & Software | Automox](/content/solutions/industries/k-12-education/index.html): Get full control of your endpoints with Automox's easy-to-use, cloud-based K-12 IT solution and software. Learn more about our K-12 IT software and request a demo! (574 words)
- [Mount Linux /tmp as a Dedicated tmpfs Filesystem](/content/worklets/ensure-tmp-is-configured/index.html): Separate Linux /tmp into a dedicated tmpfs filesystem with nosuid, nodev, and noexec options persisted in /etc/fstab. Aligns endpoints with CIS Benchmark 1.1.2. (703 words)
- [Automox Worklets Catalog](/content/worklets/index.html): Browse the Automox Worklets Catalog for hundreds of PowerShell and bash scripts to easily manage your Windows, macOS, and Linux devices. (329 words)
- [State & Local Government IT Solutions | Automox](/content/solutions/industries/state-local-govt/index.html): Are your government devices patched? Find out how Automox can help you manage endpoints with cloud-native state and local government IT solutions today! (478 words)
- [MSP & MSSP IT Automation | Automox](/content/solutions/industries/service-providers/index.html): Quickly automate and scale your endpoint management services with Automox's fast, reliable, and easy IT automation platform for MSPs and MSSPs. Learn more! (606 words)
- [Customers and Testimonials | Automox](/content/customers/index.html): IT teams in every sector, at organizations big and small, choose Automox to supercharge their endpoint management strategy. Learn how our customers are creating next-generation ITOps environments. (221 words)
- [Automox Careers | Benefits, Culture, Perks, and Open Positions](/content/careers/index.html): Calling all visionaries, innovators, and problem solvers. At Automox, innovation isn't just about technology. It also frames the way we work with each other, shaping our values, culture, and community. (485 words)
- [Fast, Reliable IT Automation | Automox](/content/platform/index.html): Automox AI-powered IT automation platform helps thousands of companies automate patching, configuration, and control of Windows, macOS, and Linux endpoints. Learn more! (549 words)
- [Start Your Free Autonomous IT Trial | Automox](/content/signup/index.html): Try Automox free for 15 days. Mitigate at AI speed across Windows, macOS, and Linux. No credit card required. (154 words)
- [Get a Personalized Autonomous IT Demo | Automox](/content/request-demo/index.html): Automate patching, mitigate what can't be patched, and govern every Windows, macOS, and Linux endpoint. See Automox in a personalized demo., Explore our platform (194 words)
- [SaaS Ops - SaaS Endpoint Management | Automox](/content/solutions/industries/saas/index.html): We are SaaS, so we get it. Exceed your customers' expectations with Automox with constant uptime, security, and more effortlessly with SaaS Ops and endpoint management. (359 words)
- [Automox Known Product Security Vulnerabilities](/content/platform/security/advisories/index.html): Follow the Automox Security Advisories for known CVEs affecting the Automox platform. Filterable by severity or CVE number. (368 words)
- [IT Operations Sports Organizations - Sports Endpoint Management Software | Automox](/content/solutions/industries/professional-sports/index.html): Get the visibility, automation, and control your sports organization IT team needs. Learn how to effortlessly address your endpoints in real-time with Automox! (394 words)
- [Automox Company Leadership, Board of Directors, & Values](/content/company/index.html): Automox is the IT automation platform for modern organizations. Explore our values & find out what makes us who we are - curious, impactful, & radically efficient. (185 words)
- [Pharmaceutical IT Automation & Endpoint Management | Automox](/content/solutions/industries/pharmaceutical/index.html): Automox is the choice for pharmaceutical IT automation. Learn how to confidently enact endpoint management, device stability, and compliance challenges with ease. (293 words)
- [Automox Embedded OEM Technology & Tools | Automox](/content/partners/oem/index.html) (267 words)
- [Turnkey Results for Automox | Guaranteed Endpoint Outcomes](/content/solutions/turnkey-results/index.html): Turnkey Results ends DIY endpoint management with a proven operational blueprint that configures Automox correctly from day one — for predictable, tailored endpoint outcomes built on 1.4 billion policy runs. (401 words)
- [Welcome to Automox University!](/content/university/index.html): Level up and become a true Automox expert through certificates, learning paths, interactive courses, videos, and live webinars. (161 words)
- [Contact Us | Automox](/content/contact-us/index.html): Need to get in touch with Automox? Give us a call! We'll help you patch, configure, and control your systems. (99 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/robots.txt): Crawler directives
- [Agentsite Network](https://agentsite.network/network.html): Public index of Agentsites and their machine-readable resources