I think there are probably a couple pieces here. 1. Is the system configured to automatically pull the definition updates 2. Is the actual state of the system what you would expect it to be (ie those updates have been installed) Same issue with Windows Monthly Patch Tuesday - I want to check that a system is set to automatically download & install updates, but I also want to check that updates have successfully ben installed recently (ie monthly)