Duration
Nessus
1 day
Overview
The Nessus Professional Training course provides comprehensive instruction on the setup, configuration, and utilization of Nessus Essentials/Pro for effective vulnerability analysis. Participants will learn fundamental concepts of vulnerability assessment, including passive and active information gathering techniques, policy and plugin rules, scan settings, and result analysis. The course covers the organization of scans within Nessus, host discovery, OS identification, and the application of policies and compliance templates. Additionally, participants will gain hands-on experience with Nessus features such as the web application scanner and authenticated scans, culminating in the generation of detailed vulnerability assessment reports.
Learning Objectives
- Understand the setup and configuration process of Nessus Essentials/Pro.
- Gain proficiency in basic vulnerability analysis techniques.
- Learn passive and active information gathering methods within Nessus.
- Explore scan organization and management using Nessus folders.
- Master host discovery and OS identification scans.
- Gain insight into policy and plugin rule customization.
- Familiarize yourself with Nessus settings for optimal performance.
- Develop skills in analyzing and interpreting vulnerability assessment results.
- Utilize Nessus policies, compliance templates, and additional features like the web application scanner and authenticated scans.
- Learn to generate comprehensive vulnerability assessment reports using Nessus.
Course OutlineModule 1: Introduction to Nessus Professional
- Overview of Nessus Essentials/Pro
- Installation and setup procedures
Module 2: Fundamentals of Vulnerability Analysis
- Understanding vulnerability assessment concepts
- Basic vulnerability analysis techniques
Module 3: Information Gathering Techniques
- Passive information gathering
- Active information gathering
Module 4: Organizing Scans in Nessus
- Managing scans using folders
- My Scans, All Scans, Trash folders
Module 5: Nessus Scanning Techniques
- Host discovery scans
- OS identification scans
Module 6: Policy and Plugin Rules
- Customizing policies and plugins
- Rule management in Nessus
Module 7: Settings and Configuration
- Optimizing Nessus settings for efficient scanning
- Advanced configuration options
Module 8: Analyzing Scan Results
- Interpreting vulnerability assessment results
- Prioritizing and categorizing vulnerabilities
Module 9: Advanced Nessus Features
- Utilizing Nessus policies and compliance templates
- Web application scanning
- Authenticated scans for deeper analysis
Module 10: Generating VA Reports
- Creating comprehensive vulnerability assessment reports
- Report customization options and best practices
Programme scope, delivery arrangements and suitability are confirmed during enquiry.