Threat and vulnerability management

Identifying and using available security knowledge to mitigate and manage potential adversary actions.

---

Nessus

• Introduction
• Installation on Debian/Kali and Ubuntu
• Host discovery
• Basic network scan
• Web application scan

MITRE

• Introduction
• ATT&CK® framework
• CAR knowledge base
• ENGAGE
• D3FEND
• ENGENUITY

YARA

• Introduction
• Installation and basic use on Linux
• Scanning with Loki
• Creating Yara rules with yarGen

OPENVAS

• Introduction
• Scanning infrastructure
• Reporting and continuous monitoring

MISP

• Introduction
• Dashboard
• Feeds
• Taxonomies
• Tagging

THM Capture The Flag

• Introduction
• Zerologon

---