Vulnerability and patch management
Within any environment, an important aspect is vulnerability management. Vulnerability management is a lot more than just looking after software vulnerabilities, but this book will only be focusing on identifying and remediating security vulnerabilities at the software level. Vulnerability management can be broken down into five main stages:
- Assess: This involves defining all your assets and scanning for vulnerabilities. This can be automated using third-party applications, manual scripts, or other tools that you might have. For instance, vendors such as Rapid7 and Qualys have products and cloud services that can be used for scanning the entire infrastructure for known vulnerabilities. Microsoft also has a built-in vulnerability detection service in their product called Defender for Endpoint and Defender for Servers. However, this product only covers Windows machines and third-party applications installed on those machines. Unlike the products...
