Discovering System Vulenerabilities
Knowing about and addressing a critical vulnerability before a threat actor can use it is a crucial part of a security program. Once the vulnerability is known, assessing and managing the risk, as I discuss in the CVSS calculator video above, is not difficult if you understand your network and the associated controls framework.
In this video, I walk through various ways to identify vulnerabilities across your systems. How to assess the risk, the second step in vulnerability management, is in the CVSS video below.
Table of Contents:
00:00 - Introduction
01:24 - Asset inventories
05:01 - Identifying Vulnerabilities
05:51 - When to Scan
=====
Video script: https://adventuresinsecurity.com/CISS...
=====
CVSS Video: • Vulnerability Management and the CVSS Calc...
=====
National Vulnerability Database: https://nvd.nist.gov/
(This is also where you will find the CVSS calculator ...)
=====
Bibliography
Warsinkse, J., Graff, M., Henry, K., Hoover, C., Malisow, B., Murphy, S., Oakes, C. P., Pajari, G. E., Parker, J., Seidl, D., & Vasquez, M. N. (2019). Official (ISC)2 Guide To The CISSP CBK. (5th ed.). Sybex.