Description
In this video, we explore one of the most critical areas of the Tenable platform: defining and managing vulnerability findings. Understanding how to navigate these metrics is essential for effective remediation.
WHAT YOU'LL LEARN
* Navigating Findings: Access findings through the main dashboard or the menu by choosing explore then findings.
* VPR vs CVSS: Tenable VPR provides extra context based on ease of exploitability and real-world factors.
* Sticky Queries: Queries can be sticky and override other changes.
* Side Menu: The side menu acts as a quick filter that can override the top menu.
* Plugin Output: This is the bread and butter used to determine true operating system and software versions.
* Remediation: Solutions might require patching, scripting, or changing permissions and registry settings.
VULNERABILITY STATES
* NEW: A vulnerability that was recently discovered within a specific timeframe.
* ACTIVE: A vulnerability that has been detected but not yet remediated.
* FIXED: Vulnerabilities that show up in the console once they are resolved.
* RESURFACED: Issues that reappear often because Tenable reuses the same six-digit plugin identifier for similar vulnerabilities.
* Common Resurfaced Apps: This frequently occurs with products like Zoom, Google Chrome, and Microsoft .NET.
VIDEO CHAPTERS
00:00 - Introduction to Tenable Findings
00:13 - Filtering by Severity
00:30 - Using the Explore and Findings Menu
01:36 - Quick Filters vs Top Query Bar
01:54 - Understanding Tenable VPR and Key Drivers
02:56 - Navigating Vulnerability States
03:14 - Why Vulnerabilities Resurface
04:47 - Filtering for Fixed Vulnerabilities
06:40 - Deep Dive: Plugin Output and Version Verification
08:16 - Remediation Types, Solutions, and Logic
09:23 - Detection Timelines and SLA Dates
11:44 - Risk Factors: CVSS v3 and v4
Pro Tip: Always strive to validate the information Tenable shows you by manually checking the machine when possible to ensure accuracy.