shellsharks on Nostr: Yes! That inventory needs ownership info too =). I've built/run a few VM programs, ...
Yes! That inventory needs ownership info too =).
I've built/run a few VM programs, the biggest hangups have always been...
1. (aforementioned) Asset Inventory
2. Vuln Prioritization (you can't rely on the tool's severity output, so how can you automate re-risk-ranking?)
3. Scan fidelity (targeting, tuning, discovery, etc...)
4. Reporting (everything from delivering prioritized scan findings to system owners to delivering actionable intel to mgmt)
I should write a post…
I've built/run a few VM programs, the biggest hangups have always been...
1. (aforementioned) Asset Inventory
2. Vuln Prioritization (you can't rely on the tool's severity output, so how can you automate re-risk-ranking?)
3. Scan fidelity (targeting, tuning, discovery, etc...)
4. Reporting (everything from delivering prioritized scan findings to system owners to delivering actionable intel to mgmt)
I should write a post…