Skilling snack: Application Control for Windows

lightupdifire There is a service called the Intelligent Security Graph (ISG) that does some of that but other things such as "Check the software vulnerability" is not trivial at all and requires some reverse engineering and other steps which are currently not easy to automate.

You can find more info about ISG in here

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/design/use-wdac-with-intelligent-security-graph