Watson

Use only when reproducing a build covered by its fixed checks. Upstream was archived in September 2021; it is not a current vulnerability feed.

.\Watson.exe > watson-output.txt

1. Record the OS edition, build, architecture, and Watson source revision.
2. Check that the build and CVE are present in that revision's code. Unsupported builds are not assessed.
3. Treat VULNERABLE as a patch-based candidate. Verify the affected component and superseding cumulative updates against the vendor advisory.
4. Preserve the output and applicability conclusion. A missing KB identifier alone does not establish vulnerability.

For newer systems, use an updated patch-inventory workflow such as WES-NG and verify its suggestions against Microsoft's update guide. Configuration checks belong in PrivescCheck.