You missed one other mitigation tool: 0patch It's usefulness is limited on XP but you might have applications that are captured. They also haven't closed the

You missed one other mitigation tool: 0patch It's usefulness is limited on XP but you might have applications that are captured. They also haven't closed the door (at least as of last year) to patching any future major-drama events that come up: https://0patch.zendesk.com/hc/en-us/articles/360018274139-Does-0patch-add-value-on-older-Windows-versions-such-as-Windows-XP-or-Server-2003 https://0patch.zendesk.com/hc/en-us/articles/360018274139-Do...