Index 04 / Talks

March 2023 · Spotlight Webinar

Spotlight Webinar: Vulnerability Remediation

Runtime
26:25
Series
Spotlight Webinar
Recorded
March 2023

What a vulnerability actually is: CVE identity, CVSS scoring, and the split between patch and configuration vulnerabilities. Then a live remediation loop on three findings, closing on why remediation should be policy-driven rather than pushed ad hoc.

16 chapters
  1. 00:00:01Introduction
  2. 00:01:08What a vulnerability is: confidentiality, integrity, availability
  3. 00:02:23CVE as an identity framework
  4. 00:03:50CVSS and how severity is scored
  5. 00:05:13Patch vulnerabilities versus configuration vulnerabilities
  6. 00:07:44Follina: when a configuration issue becomes a patch
  7. 00:09:11CIS benchmarks and baseline frameworks
  8. 00:10:19Architecture and the scan-then-remediate loop
  9. 00:13:53The vulnerability library
  10. 00:15:09Three live findings: password complexity, DNS resolver spoofing, auto sign-in after restart
  11. 00:17:36Resolution workflow walkthrough: registry keys, C# script, revalidation
  12. 00:18:47Policy-based remediation over ad hoc tasks
  13. 00:20:14Scheduling and scope: every three days, all assets
  14. 00:22:35Against GPO: agent-based and real time
  15. 00:23:54Reporting: patch risk and configuration risk assessments
  16. 00:26:09Close

Also on YouTube · vulnerability management, CVE, CVSS, confidentiality integrity availability, patch vulnerability

Next — Blogs