Vulnerability - Tracking and Remediation

From: xelerated (xelerated@gmail.com)
Date: Fri Apr 13 2007 - 07:36:26 EDT


I have a question for the pen test community.

Does anyone have a free (OSS or other) way to take your vuln scan data
(nessus in this case)
and do tracking and remediation?

As it sits now, I scan at work atleast 300 machines a month, and my
monthly list is growing, and will soon include subnets as well.

I used to take the pipe delimited format and run it through excel and
work with it from there.
and that worked fine back when I was only scanning 200 a month max but
its become extremely cumbersome.

Also, if there is no such good tool out there, im no coder, but if
others out there would like to work on such a project id like to do
that too.

Thanks!

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:43 EDT