It's been a while since I've posted anything here! After all, what are personal blogs for but ignoring for years at a time ;)
Anyhow, I've been running through this demo when teaching SANS SEC760 and I thought I'd write it up so that researchers can come back to it later when they need it. It's also useful to document all of this stuff in one place, since the information about it seems scattered throughout the internet, as many Windows topics are.
So why should you care about extracting and analyzing Windows patches? Doesn't the patch mean the bugs being fixed are now useless?
...
Check out the full post for more details!