7MS #417: Vulnerability Scanning Tips and Tricks
This episode of the 7MS podcast is brought to you by ITProTV. It’s never too late to start a new career in IT or move up the later, and ITProTV has you covered. From CompTIA and Cisco to ECCouncil and VMWare. Get a 7-day free trial and save 30% off all plans by going to itpro.tv/7MS
Today's episode is all about getting the most value out of your vulnerability scans, including:
-
Why, IMHO you should only do credentialed scans
-
Policy tweaks that will keep servers from tipping over and printers from printing novels of gibberish ;-)
-
How to make your scan report more actionable and less unruly
-
Turning up logging to 11 (use with caution!)
-
A small tweak to an external scan policy that can result in the difference between a successful or failed scan
-
The nessusd.rules file is awesome for excluding specific hosts and services from your scans