Sharon Everson

Managing changes among hardware and software assets on a network can be a difficult challenge for any organization to monitor effectively. Many of today’s asset management tools lack complete visibility, and do not account for rapid changes among assets that traverse the network. With this report, organizations can obtain valuable information on changes to hardware assets, number of hosts, software versions, and any unauthorized assets.

Indicators of compromise are artifacts of unusual or unexplained network activity, behavior, pattern, or configuration changes that could indicate a potential breach has occurred. A good approach in identifying attacks and data breaches is to monitor the network for unusual activity. This dashboard takes many of the various detection technologies for botnets, malicious file hashes, anomalous network traffic, spikes in system logs, and continuous scanning activity and places them into one spot.

Vulnerability management is a key responsibility of any security team. By understanding the vulnerabilities a network faces, security teams can tailor mitigation and hardening strategies to be more effective. Nessus provides vulnerability scan information while the Nessus Network Monitor (NNM) continuously monitors network traffic for potential vulnerabilities. Tenable.sc Continuous View (CV) has the ability to monitor vulnerability information detected by Nessus and NNM.