Skip to content

Latest commit

 

History

History
23 lines (15 loc) · 1.01 KB

File metadata and controls

23 lines (15 loc) · 1.01 KB

MS Vulnerability Scanner

Scans SQL Server Databases for Security Vulnerabilities

Uses the same Vulnerability database found in SSMS 17.4+, and Azure Defender for SQL (so why pay for that?)
but runs for ALL Databases on a server, not just one at a time like SSMS does

Note:
MS purposefully removed this from SSMS 19.1 so they could charge for the same thing as Defender
https://learn.microsoft.com/en-us/sql/relational-databases/security/sql-vulnerability-assessment?view=sql-server-ver16#removal-of-the-sql-vulnerability-assessment-in-sql-server-management-studio-191

Defender doesnt actively scan for anything, making it useless

Input:
Run-MSVAScan.ps1 -instance SQLSERVERINSTANCE [-User SQLAuthUser] [-Password SQLAuthPassword]

Output:
*HTML file with a scan summary sorted by Severity
*HTML file with a scan summary sorted by Database
*Text file with TSQL Remediation Code for each scanned Database

alt text