8 Essential Tips for Securing Networks

Here're the 8 tips I copied from Rapid7 for "emergency field security" that any defenders can take immediately. 

Given the urgency, many information security teams find themselves scrambling to prioritize mitigation actions and protect their networks. Some may not have time to make their networks less flat, patch all the vulnerabilities, set up a backup plan, encrypt all the data at rest, and practice a incident response scenarios before disaster strikes. 

With essential security, it helps identifying urgent steps to take right now.

1. Starts prioritize those patches with CISA's KEV.
   
2. Keep an eye on egress.
3. Review Active Directory (AD) groups.
4. Don't laugh off LOL.
5. Don't push it.
6. Stick to the script.
7. Call for backup.
8. Practice good posture.
   

Links

• 8 Tips for Securing Networks When Time Is Scarce
• Project Doppler
  

Search assets in Kenna using Command Line

Today, I just converted an old python script to Windows executable file for myself.

It allows me to search assets based on hostname or IP address in Kenna at the command line. It also allow me to match a particular CVE and list all the vulnerabilities for the asset.

This is a strip down version where it only able to search assets within Kenna. (The full version can search within Kenna and R7 Nexpose). Below is the help screen:

kenna-assets-win.exe -h

Again, no source code nor executable package will be released at Github.