Nessus Vulnerability Scanner

Scope Of Work:

Installed and configured Nessus Essentials for credential vulnerability scans on Windows 10 hosts, optimizing security assessment and risk mitigation. Implemented end-to-end vulnerability management on sandbox networks, encompassing Discovery, Prioritization, Assessment, Reporting, Remediation, and Verification. Conducted vulnerability assessments with Nessus, efficiently identifying and remediating vulnerabilities while developing automated processes to proactively address risks associated with Windows updates and third-party software.

Tools:

• Tenable Nessus

• VMware Workstation (Hypervisor)

• Mozilla Firefox (Deprecated Version)

• Common Weakness Enumeration (CWE)

Lesson Learned:

• Virtualization (HoneyPot)

• Vulnerability Scanner

• Common Weakness Enumeration (CWE)

• Common Vulnerability Scoring System (CVSS)

• MITRE ATT&CK Framework

• Remediation

Challenges:

There were no significant challenges encountered in relation to this project. However, if I were to provide feedback, I would recommend reviewing the various Common Weakness Exposure (CWE) documents. These documents and alerts provided valuable insights on how to effectively address and remediate the identified vulnerabilities.

Resources:

• How to Install VMware Workstation Player in Windows 10

• Nessus Tutorial for Beginners: Vulnerability Management

• Common Weakness Enumeration: CWE

• Nessus Tenable

• I could not find the deprecated Firefox ISO file, but I would recommend googling for one in the HoneyPot.

Images: