Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Vulnerability Discovery And Analysis
After conducting reconnaissance, scanning, and enumeration, security analysts must analyze the gathered data, validate the results, and determine the next steps. This phase ensures that vulnerabilities are accurately identified, reducing false positives and negatives, ensuring scan completeness, and selecting appropriate public exploits for further testing. Analysts may also use scripting to automate and validate findings.
1. Validating Scan, Reconnaissance, and Enumeration Results
Network and vulnerability scanning help identify weaknesses in systems, but interpreting scan results accurately is crucial. Misinterpretation can lead to wasted resources or overlooked threats. The three key outcomes of vulnerability scanning are false positives, false negatives, and true positives.
a. False Positives
A false positive occurs when a security scanner incorrectly flags a vulnerability that does not actually exist. This can lead to unnecessary investigations and wasted time.