Re: Canned audits

Well,

I have recently been using eEye UPNP scanner, because ISS is currently
giving a *ton* of false positives for UPNP. I also followed up with a
Nessus scan of the suspect hosts. Of all the UPNP flagged by ISS,
maybe 30% were legit.

It's always a good idea to be familiar with more than one tool for
percisely this reason.

On 3/28/06, Clemens, Dan <Dan.Clemens@xxxxxxxxxxxxxxx> wrote:
I actually prefer the Tenable line of products. They are the creaters
of Nessus which is the de facto standard of >>>>>>>>vulnerability
scanners on the Internet.

One cool thing you can do with some of the other products is use
multiple scanners, and then do corrilation of the vulnerability data
once it has been discovered.

Now I guess this is only cool if you want to use multiple scanners in
hopes that one scanner will catch things another didn't.

Out of curiosity - is anyone on the list actually utilizing multiple
scanners and corrilating the data within their risk assessment process
or is everyone that uses other peoples scanners utilizing just one
brand/vendor?

- Daniel Clemens


-----Original Message-----
From: sol@xxxxxxxxxxxxxxxxxxxxxxxxx
[mailto:sol@xxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, March 28, 2006 7:29 AM
To: r@d
Cc: pen-test@xxxxxxxxxxxxxxxxx
Subject: Re: Canned audits

I actually prefer the Tenable line of products. They are the creaters
of Nessus which is the de facto standard of vulnerability scanners on
the Internet.

Tenable has created a number of tools to surround Nessus to offer (in my
view) a complete security audit solution.

Nevo is a Passive Vulnerability Scanner
Thunder is their Log Correlation Engine
Lightning is the management tool that pulls everything together in one
easy to manage console. From here you can create policies, run
distributed scans of your entire enterprise and then create reports as
generic or as explicit as you need.

From what I hear they are about to release a new version which includes
policies for compliance for all the major standards in the industry.

Sol


Quoting "r@d" <m2rad@xxxxxxx>:

Hi Rob,

There are quite a few tools around there to perform these kinds of
audits. I

personally like eEye Retina with REM Events Manager Console best. It
allows you to perform scheduled audits and have results posted in a
dashboard like way, or even have reports send by email.

I see you are especially interested in Wireless, therefor I think eEye

Retina is speficially fit for your needs.

Kind Regards,

Rajendra Soebhag
Technical Consultant - Trainer
CCA, CCEA, CCI


----- Original Message -----
From: "ROB DIXON" <rdixon@xxxxxxxxxxxxxxx>
To: <pen-test@xxxxxxxxxxxxxxxxx>
Sent: Friday, March 24, 2006 8:27 PM
Subject: Canned audits


Hi All,

We have had many audits in the past by 3 party vendors. My company is
finally interested in performing some of these audits in house and a
little more frequently than the annual 3rd party audits.

My question is, is there a software package, a "canned" audit that can

be performed? Basic info gathering questions regarding authentication
controls,

network documentation(how and where it is stored), question that
should be asked regarding wireless AP and other basic security
questions?

-Rob Dixon

Robert L. Dixon, CSO
CHFI A+
State of West Virginia's
West Virginia Office of Techonology
Infrastructure Applications
Netware/GroupWise Administrator
Telephone: (304)-558-5472 ex.4225
Email:rdixon@xxxxxxxxxxxxxxx

----------------------------------------------------------------------
-------
-
This List Sponsored by: Cenzic

Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to
proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security
penetration testing and vulnerability management needs. You have an
option to go with a managed service (Cenzic ClickToSecure) or an
enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm
your results from other product. Contact us at request@xxxxxxxxxx
----------------------------------------------------------------------
-------
-


----------------------------------------------------------------------
-------
-
This List Sponsored by: Cenzic

Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to
proactively

protect your applications from hackers. Cenzic has the most
comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go
with a managed service (Cenzic ClickToSecure) or an enterprise
software (Cenzic Hailstorm).

Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm
your results from other product. Contact us at request@xxxxxxxxxx
----------------------------------------------------------------------
-------
-






------------------------------------------------------------------------
------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to
proactively protect your applications from hackers. Cenzic has the most
comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go
with a managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm
your results from other product. Contact us at request@xxxxxxxxxx
------------------------------------------------------------------------
------



-----------------------------------------
Confidentiality Notice: This e-mail communication and any
attachments may contain confidential and privileged information for
the use of the designated recipients named above. If you are not
the intended recipient, you are hereby notified that you have
received this communication in error and that any review,
disclosure, dissemination, distribution or copying of it or its
contents is prohibited. If you have received this communication in
error, please notify me immediately by replying to this message and
deleting it from your computer. Thank you.


------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to proactively
protect your applications from hackers. Cenzic has the most comprehensive
solutions to meet your application security penetration testing and
vulnerability management needs. You have an option to go with a managed
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@xxxxxxxxxx
------------------------------------------------------------------------------



------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to proactively
protect your applications from hackers. Cenzic has the most comprehensive
solutions to meet your application security penetration testing and
vulnerability management needs. You have an option to go with a managed
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@xxxxxxxxxx
------------------------------------------------------------------------------

Relevant Pages

  • Re: Canned audits
    ... scanners on the Internet. ... Subject: Canned audits ... view) a complete security audit solution. ... Lightning is the management tool that pulls everything together in one ...
    (Pen-Test)
  • RE: Canned audits
    ... As for methodologies you may want to follow the NSA's assessment methodoloty or Open Source Security Testing Methodology from isacom. ... We have had many audits in the past by 3 party vendors. ... vulnerability management needs. ...
    (Pen-Test)
  • Re: Need help in making penetration testing tool
    ... So called vulnerability management tools and systems combine assessment tools like vulnerability scanners, port and network scanners with security patching funcionality. ... Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. ...
    (Pen-Test)
  • RE: CISSP-ISSMP
    ... management say "that's nice", and move on. ... education, certification, experience, know-how, abilities, and ... Many 'security jobs' are nothing shy than that of an overly glorified ... Download FREE whitepaper on how a managed service ...
    (Pen-Test)
  • RE: security not a big priority?
    ... But I have found that upper management will only ... and push out the changes; management has to have this information to ... Network Security Engineer ... Network team with Project Management tasks. ...
    (Security-Basics)