Awesome. Thank you for this. 

It never hurts to triple check these types of things. 

Won't bore you all with media recaps, but it's been an interesting weekend to say the least. Thanks to the way Microsoft issues patches, there are quite a few KBs to look for... So we wanted to share some technical details to help you determine if your endpoints are protected from this ransomware:

* [Automate KB for new Patch Manager](https://docs.connectwise.com/ConnectWise_Automate/ConnectWise_Automate_Knowledge_Base_Articles/MS17-010_or_WannaCry_-_New_Patch_Manager)
* [Automate KB for legacy Patch Manager](https://docs.connectwise.com/ConnectWise_Automate/ConnectWise_Automate_Knowledge_Base_Articles/MS17-010_or_WannaCry_-_Legacy_Patching_and_all_versions_prior_to_Automate_11)

**Bonus**: If you're using [Webroot, you're already protected](https://www.webroot.com/blog/2017/05/13/wannacry-ransomware-webroot/).

If you really want to go the extra mile tho, start disabling SMB v1 where possible, as it was used in ~30% of the exploits released by ShadowBrokers last month.

Edit: typo

MS17-010 (aka WannaCry ransomware)