Scanning and Asset Inventory
Knowing what you have and its weaknesses.
You Cannot Protect the Unknown
Every vulnerability management program rests on one foundation: knowing what you have. An accurate asset inventory defines the scope of scanning; anything missing from it is an unmonitored blind spot.
Shadow IT, forgotten cloud instances, and unmanaged containers are where breaches hide. Inventory first, scan second.
What Counts as an Asset
Modern inventory is broader than servers:
- Physical and virtual hosts, laptops, network devices.
- Cloud instances, serverless functions, storage buckets.
- Containers and images.
- Installed software and OS versions.
- Public-facing domains, IPs, and certificates.
Track an owner, environment, and criticality for each, not just an IP.
All lessons in this course
- The Vulnerability Management Lifecycle
- Scanning and Asset Inventory
- Prioritization: CVSS, EPSS and KEV
- Patch Management and SLAs