Risks & Vulnerabilities: Overview

We’ve gained an understanding of the broad network, the devices on the network, and how they communicate.

Next, we’ll dive into specific risks and vulnerabilities on the network. While this certainly includes classic CVE-style vulnerabilities, we’ll be reviewing broader system operations, user behaviors, and the behaviors of network devices as well.

---

TASKS

1. Navigate to Risks & Vulnerabilities > Overview.
   
   

2. Set the time scale to Last Year
   
   

3. What is the environment’s current Hygiene Score?

4. Are there any insecure protocols in use? Which ones? On what devices? How many can be potentially mitigated?

5. Are there any devices attempting to communicate externally from the network? What appears to be standar traffic versus possible data exfiltration?

6. What are the Top Insights?

   1. If we’re “compliance focused,” where would we start examining further?
   2. If we’re “security focused,” where would we start?

REFLECTION

• From the overview page alone, where would you go next to investigate environment vulnerabilties?