TLDR InfoSec · LAUNCHES & TOOLS

MICROSOFT-VULNERABLE-DRIVER-BLOCK-LISTS

github.comGitHub repository

Summary from the TLDR InfoSec newsletter

Microsoft no longer provides the vulnerable driver block list in a browsable web page, making it harder to access directly. Instead, the list is only available as a downloadable ZIP file, which complicates its use in SIEM products for lookups and other functions. This project automates the download, extraction, and parsing of the ZIP file, converting the data into CSV and JSON formats for seamless integration with SIEM and security tools.