Post-patch verification smoke tests
Overview
Patches close vulnerabilities only if services still run—automate smoke checks.
Examples
HTTP 200 on public portal, LDAP bind test account, database SELECT 1, print spooler test job.
Timing
Start tests 15 minutes post-reboot sequence completion; duration <5 minutes typical.
Failure
Auto-open Sev2; page on-call if ERP smokes fail.
Library
Central script repo versioned—no one-off test.ps1 on desktops mysteriously.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...