AlienVault — SIEM (Security Information and Event Management)
Whatever good things we build end up building us.
Today I will be walking you guys on how a software vulnerabilities are being performed through SIEM, one of the SIEM tools is an AlienVault which is an open source.
For newbies, this tutorial gives an overview on how the scan is performed.
AlienVault can be used to detect software vulnerabilities in web-applications. that can be used to detect vulnerabilities need to be rectified by the Cyber Security Analyst to ensure the environment is secure from exploits and potential data breaches.
Follow steps to download and install AlienVault in lab environment
1. Enter Username and Credentials.
2. Click on Environment -> Vulnerabilities
3. Please enter a Job Name of your choice, and enter IP/hostname of the node you want to scan in [Type here to search assests].
4. Wait until the job completes.
5. Once the job completes, select PDF to download the Vulnerability Report.
6. Now you have PDF report, you can apply necessary fixes on the host you entered.
Thank you everyone! I will keep updating the post on Cyber Security.