domains / families / security / performing-vulnerability-scanning-with-nessus

performing-vulnerability-scanning-with-nessus

separate

'Performs authenticated and unauthenticated vulnerability scanning using

When to use

• Conducting initial vulnerability assessment during the reconnaissance phase of a penetration test
• Performing periodic vulnerability scans to maintain compliance with PCI-DSS (requirement 11.2), HIPAA, or SOC 2 standards
• Validating that remediation efforts have successfully addressed previously identified vulnerabilities
• Establishing a baseline of known vulnerabilities before targeted manual exploitation
• Auditing patch compliance and configuration drift across server and workstation fleets

When not to use

• manual penetration testing
• scanning without written authorization
• scanning fragile systems like medical devices
• scanning legacy SCADA systems

Skill page

Source