I have a need/desire to obtain multiple windows VMs patched up to specific dates to use for testing malware and exploits - e.g. to allow automatic evaluation like "X behaves one way until November 2015, and differently afterwards".
Is there a reasonable way to make such VMs without too much manual labor? I.e. start with a "fresh" VM and configure it (preferably in a way that can be automated by a script) to install only security updates up until date xxx / version yyy, but not anything later?