Software Installer Scripts

Patch vulnerabilities on devices via Software Installer Scripts

• Win-Get may be disabled by a group policy and needs to be enabled

  • Computer Configuration > Administrative Templates > Windows Components > Desktop App Installer > Enable App Installer

  • Force policy update: gupdate /force

What does this feature do?

Cork provides scripts for different package managers and interpreters to install or update over 10,000+ supported applications across endpoints.

What is a package manager?

A package manager is a tool that automates installing, updating, and removing software, so you don’t have to do it manually - either from the command line, through scripts, or via management tools.

Which package managers are supported?

WinGet and Chocolatey (Windows Operating System)

What is an interpreter?

An interpreter is the program that runs the generated script so the commands to install or update software actually execute on the computer.

Which interpreters are supported?

PowerShell and Batch

How can I customize the scripts?

There is a list of drop downs to select values for, such as a specific version. When the installer file is downloaded they can also be modified.

I can't find an installer for my vulnerable product

Sometimes package managers have different names for software than what is used for CPEs and CVEs. If you have a vulnerability for "Microsoft Edge Chromium" for example, you may need to search instead for "Microsoft Edge". It is important to note that package managers don't support every software that exists.

Can I automate these installers from Cork?

Not today, we are actively looking into ways we can provide this capability. However, you can import these scripts into your RMM or patching tool to deploy them across your clients' endpoints.

Can I provide my own script templates?

Not today, however we are looking at allowing this in the future.

The source requires the current machine's 2-letter geographic region to be sent to the backend service to function properly

Run the script with administrator privileges.

This operation is disabled by group policy: Enable Windows Package Manager

Enable App Installer group policy. You can find the details under Script Requirements above.