We've been running patch reports for our Microsoft environment and this is cross-checked with the server team's SCCM server. This has not been too smooth due to the Patch Report from Qualys listing the Roll-up missing instead of the patch itself. Some of these Roll-ups (Like MS11-025) contain 5 different KB articles that are reflective of the version of the OS (Windows 2008 R2 64-bit Enterprise, Windows 2012 Enterprise, etc).
Qualys certainly has the data necessary to report on missing KB's as it already has the OS version, etc. Has anyone figured out how to report on missing Microsoft Patches by KB article (which is how Microsoft tracks patches) and not by Roll-up's?
Open to suggestions.