Vulnerability Management

Lessons

1. 1

   What is Vulnerability Management?

   Understand the vulnerability lifecycle: discover, prioritize, remediate, and verify.

   Beginner·35 min
2. 2

   Scanning and Discovery

   Use Nmap to scan networks and interpret scan results in a safe practice environment.

   Intermediate·45 min
3. 3

   CVEs, CVSS, and Prioritization

   Understand CVE tracking, CVSS scoring, and how to prioritize remediation by risk.

   Beginner·35 min
4. 4

   Patch Management

   Learn patch management workflows and why automated vs manual patching decisions matter.

   Beginner·35 min
5. 5

   Vulnerability Assessment vs Penetration Testing

   Distinguish assessments from penetration tests in scope, purpose, and reporting.

   Beginner·30 min
6. 6

   Continuous Vulnerability Management

   Build a vulnerability management program with metrics, CI/CD integration, and compliance.

   Intermediate·35 min
7. 7

   Hands-on: OpenVAS in Docker

   Stand up OpenVAS in Docker and run a full scan-to-remediation cycle against a deliberately vulnerable VM.

   Intermediate·60 min
8. 8

   Reading CVEs and Writing the Report

   Read a CVE entry plus its CVSS vector, prioritise with CISA KEV and EPSS, and write a one-page vulnerability report.

   Intermediate·45 min
9. 9

   Enterprise Patch Management

   Explain WSUS, SCCM, Intune, and the patch Tuesday cadence, and design a patch policy with staged rings.

   Intermediate·45 min
10. 10

    Vulnerability Management Resources and Next Steps

    Explore curated resources, practice platforms, and next steps for vulnerability management.

    Beginner·25 min
11. 11

    Vulnerability Management Job Readiness

    Translate VM skills into a resume, portfolio plan, and interview prep for analyst roles.

    Beginner·30 min