筑患扫描流
原名：building-vulnerability-scanning-workflow
构建结构化的漏洞扫描工作流，使用工具如 Nessus、OpenVAS 等，系统化地识别和评估系统安全弱点。
- 分类
- 开发提效
- 版本
- v1.0
- 作者
- 弈韬(@ra1nzzz)
- 下载
- 1
- 收藏
- 0
- 发布
- 2026-08-18
- 更新
- 2026-08-25
- TRACE 评分
- 3.6 / 5
内容概览
Use this skill when: - SOC teams need to establish or improve recurring vulnerability scanning programs - Scan results require prioritization beyond raw CVSS scores using asset context and threat intelligence - Vulnerability data must be integrated into SIEM for correlation with exploitation attempts - Remediation tracking needs formalization with SLA-based dashboards and reporting Do not use for penetration testing or active exploitation — vulnerability scanning identifies weaknesses, penetration testing validates exploitability. - Vulnerability scanner (Tenable Nessus Professional, Qualys VMDR, or OpenVAS/Greenbone) - Asset inventory with criticality classifications (business-critical, standard, development) - Network access from scanner to all target segments (agent-based or network scan) - SIEM integration for scan result ingestion and correlation - Patch management system (WSUS, SCC…