Bsa gets the urls for the patches from the shavlik metadata. Even if you got the patches, w/o the metadata there would be no way to analyze which systems the patches apply to. you can manually download the patches and upload them as depot software into bsa and deploy directly, not based on the analysis result.
Ok, so in essence we have to wait for the Shavlik patch release cycle to patch our systems.
I was hoping that there was similar metadata available directly from MSFT.
That answers my question though.
Correct, Shavlik releases their patch metadata a few days after Microsoft's Patch Tuesday release.
It’s typically less than a few days – usually it’s in the 8 hour timeframe.