Conducting Nessus Vulnerability Scan Results Analysis Using Excel Spreadsheet (Hands-on)

[@shaggiiog1905]

thank you for these videos. I secured a cyber security analyst role last month and your videos are a huge part of my success story. Can't thank you enough. Bless!

[@KamilSec]

Adesegun, I am glad to hear that, comments like this grease my elbows to want to do more. Congratulations!!!

[@tamateyisaac9384]

Kamil is the best guy here really appreciate your teaching alot wowoow

[@KamilSec]

Thank you! I am glad you appreciate my videos.

[@satheeshkumarkv]

Hi, I’ve 10k vuls from my tenable scan. I want to segregate os and non os vulnerabilities. Kamil / can someone help?

[@Minoru72991]

I've recently been tasked with remediation reports for the company I'm working for and this made things so much more manageable when creating weekly reports for others to view and for me to edit. Super thankful I came across your video, excellent job and thank you so much!

[@KamilSec]

Great to hear this! You're very welcome. I will ask for a favor, please do like and share the videos to help promote the channel and also lots of people can be exposed to the videos as well. Thank you!

[@lawrencemichael6002]

Bless your heart big man. You are a savior to many life you don't even know. wow

[@KamilSec]

Thanks for the kind words Lawrence!!!

[@bilalmazhar100]

How we can make a good Dashboard once we are done with the analysis, please do video on that too

[@KamilSec]

I believe you can leverage excel capabilities

[@stephenbrown2985]

kamil we can't appreciate or say thank you enough God richly bless your soul for what u doing for us.

[@KamilSec]

It's my pleasure bro! Thanks for the prayers!

[@helenkembumbara8594]

Thank you Sir. Best Video so far

[@KamilSec]

Glad you liked it

[@ChristianaaMariee]

Can you do SSPs

[@KamilSec]

kzbin.info/www/bejne/j33aq2ewaLx_haM

[@sm1tty031]

Im a new CISSP and I am looking at job opportunities that include vulnerability scans. Iv been in IT over 20 years and have been on the receiving end of a vulnerability scan and pen tests many times...just never been on the giving end haha. This is good stuff here. I feel like Im in your office looking over your shoulder. You have a natural ability to teach...congrats

[@KamilSec]

Thank you!

[@jreh3811]

How do you get the CVE to wrap in the formula bar?

[@KamilSec]

ALT + Enter

[@askwame]

You are an excellent teacher you no idea how you have helped some of us. Please try to show is how to create a POA&M

[@askwame]

I meant to say, you do not have no idea how you have helped some of. Please teach what a POA&M is and how to create one. Thanks a million

[@KamilSec]

You’re very welcome, our next video would be on POA&M management God willing.

[@PcgInspires]

Great video. Thanks Kamil

[@KamilSec]

Glad you liked it!

[@MrMylidee]

Thanks bro, this helped me with a task at work and will be using it moving forward

[@KamilSec]

Awesome, I am glad it was helpful

[@AleByk022]

How should I filter that if I don't have Plugin ID in my scan? Filtering by CVE?

[@KamilSec]

No CVE will not be ideal, not all the vulns have CVE associated with them. Try filtering on the Host may be...

[@tweetums0213]

thank you, i liked and shared this tutorial.

[@KamilSec]

Glad it was helpful!

[@jvicksdailypay300]

how do i use ACAS scan reports to compare with the HW/SW list of the system? which column do i concentrate on?

[@KamilSec]

If there is a column called "Hostname" "IP Addresses" or "Asset" those can help

[@oliviangwa3473]

WOWWWWW,,, after watching this video, I feel like I'm already working as a Vulnerability analyst. You are just the PERFECT PROFESSOR. Thanks a million 🧡🧡🧡🧡🧡

[@KamilSec]

Yes, you can do it!

[@diversitytech]

Your video is very informative. You really explained how to analyze a scan extremely well. Thank you.

[@KamilSec]

You are very welcome!

[@steveayodele5387]

Nice. Good explanation but is there a better way of doing the sorting by plugins when you have hundreds of plugins and assets to analyze. What about using the Pivoting in excel, will it not do the samething?

[@KamilSec]

Definitely, pivot table can help

[@saintabbey1]

Thank you for another master class in Nessus.

[@KamilSec]

You are welcome!

[@shivendumenon878]

Hello, this is a great video, and I keep coming back to this one for guidance from time to time. I have come to an issue and would like you input on it. I have 3 duplicate plugin ID with 2 IP addresses (11.128 & 11.130) and 3 different ports (8834 , 25 , 5432). My confusion is should I keep 2 separate entries (128 & 130) or compile them into 1. .128 has p8834 & .130 has p25 , p5432. Would combining all 3 into a single entry give a false positive for the ports that aren't open for either Hosts? You might have faced a similar dilemma sometime for sure. Also when this report is given to the system admin for fixing the vulnerabilities, will they automate or manually use this spreadsheet. I hope I was able to explain the question.

[@KamilSec]

Yes, you have to combine them on a single plugin entry. The column that has the IP address and the Port just make sure they are corresponding horizontally on a single row i.e. Plugin ID IP Address Ports 11123 x.x.x.128 8834 x.x.x.130 25, 5432

[@edidiongeshiet9313]

Nice video. I replicated everything you did. Youre a great teacher. While sorting,using the filter and copying, My copied item wasnt going under the text on the column box. Even when i pressed command or space bar. What did you press to enable the copied item move underneath. Ill appreciate a response. Thanks

[@KamilSec]

Press ALT and Enter

[@edidiongeshiet9313]

Thank you.

[@algbla6042]

Watching from Africa. Great video. Picked up few tricks custom sorting and compressing data to reducing duplicate info. Great stuff. Thank you

[@KamilSec]

You're welcome brother!

[@michellecruse7763]

thank you so much! this video is so helpful!

[@KamilSec]

You're very welcome

[@ppvshenoy]

Thank you for your time and efforts in making such wonderful learning videos. Much appreciated.

[@KamilSec]

Glad you like them!

[@ALLISONFolks]

Thank you so much sir for all you do in teaching us, Gid bless you

[@KamilSec]

You are very welcome Allison!

[@cot818]

Thank you.

[@KamilSec]

You're welcome

[@saqcSarbeng]

Thank you Kamil. That's an excellent video and easy to understand.

[@KamilSec]

Glad it was helpful!

[@anthonyfalana8439]

very easy to understand! Thank you bro

[@sbusisomaseko1189]

Nice video

[@KamilSec]

Thanks

[@Abhi_JW999]

Hi Kamil, i need a help with nessus, im doing a lab where im scanning Metasploitable machine,im adding the IP of it in nessus ,i initiate the scan ,scan finishes in 5 seconds and no results, firewall disabled ,also im getting ping ftom Metasploitable to my local system and vice versa

[@KamilSec]

If the metasploitable and the scanner device are on the same network as you said, then check your enabled plugins to make sure they are enabled and selected appropriately.

[@mikeypauly8371]

This is really great information. Thanks

[@KamilSec]

Glad it was helpful!

[@veroniquenikiema5750]

Thank you so mush. That was really clear and clean.

[@KamilSec]

Glad it helped Veronique!

[@vitalisanjonie6598]

Excellent Sir...

[@abdulawudu8201]

Thanks, very informative as always,,,

[@dastylee]

Great video bro. One of the best detail video ever. Do you have a classic for RMF ?

[@adjeleya1787]

Thank you for this video. That was very easy to follow and informative. Much appreciated. I will send you an email for raw data of the analysis for practice. Thanks

[@SuperWinning111]

Excellent guide. Thank you!

[@KamilSec]

You're very welcome. Glad it was helpful!

[@SuperWinning111]

@@KamilSec Is it possible to create a short video on Pivot table representation of Vulnerability scan report from Nessus? This will help when exporting the tables/Bar charts/Pie charts to PowerPoint for Presentation to management Team.

[@KamilSec]

@@SuperWinning111 Sure, that will help with presentation. I will look into creating a video on that.

[@JustAsaph]

this is a master class. 👌 thank you!!

[@KamilSec]

You're very welcome!

[@michaelaidoo9]

Amazing piece. Thank you

[@KamilSec]

You're welcome, Glad you like it!

[@EmmyAdunke]

Hello, your videos are super helpful, can you please post practice interview questions. Thank you

[@KamilSec]

No worries!

[@sspoku]

All your videos are so informative. When does your next class start?

[@kayquaning6228]

Very helpful bro. Thanks so mcuh

[@KamilSec]

You're welcome bro.

[@charlesoparah5042]

Kamil, is there a way to display the host name in human readable for such as switch, server, workstation. Thank you

[@KamilSec]

Hi Charles, I am not sure I understand your question. However, hostnames are always human readable since they are the unique names use to identify devices on the network.

[@chinemeremandchido6312]

Thanks for the videos.

[@KamilSec]

You're welcome, Glad you like them!

[@mayqueen08]

Hello thank you for your videos, can i know what type of scan you have run? and i can not find a free version of XP to download, i am new to this, please help!! thank you

[@KamilSec]

I ran the Nessus Essential (the free version). Not sure if they have a package for Windows XP.

[@jleaven2707]

So my job requires a snapshot of unique vulnerabilities as well as total assets affected. By that judgement when i conduct my analysis i could only delete my line if the IP/hostname is the same?

[@KamilSec]

Hi J, for unique vulnerabilities, your best bet will be to filter based on Plugins. Remember one plugin can affect multiple IPs. Sometimes you will see same IPs on one plugin, in that case check to make sure there are on different port.

[@jleaven2707]

@@KamilSec well said. Thank you for your response and thank you so much for the information you provide for your content. It really helps a greenish ISSO myself understand alot of concept and steps. Thank you greatly

[@johnjohnston6897]

Thanks for the info! How can I find out more about the detail selection when selecting "CSV" for my report? I see some selections that I would like clarity on under columns. Thanks! ps- for some reason my nessus essentials does not give a PDF option either, any idea?

[@KamilSec]

So I believe the Nessus home essential on Windows doesn't have the PDF report option but the Linux does.

[@joffynanje8538]

If you have already filtered the duplicates and now have different CVEs that affect the same assets, do you have to remove the duplicate affected assets without the CVEs?

[@KamilSec]

No, document all the CVEs for the affected assets.

[@mknana7865]

Thanks as usual. I’m trying to download the CVS report file just like you did but when I click on CVS to download it tells me. “Couldn’t download network issue”. Ive tried different browsers but unable to download and note i have good internet. I’m using the Nessus essential and not the professional service. Did you use Nessus essential for yours. What could be the issue be and if you experience it how did you resolve it.

[@KamilSec]

I checked my setup again, it works just fine. When you click on the Report, on the upper right hand corner, then select the Report Format you want: either PDF, HTML or CSV, then click generate report. Yes I am also using the Nessus Essentials for the tutorials.

[@oniabraham]

probably your browser settings

[@mknana7865]

@@oniabraham yes it was and I’ve fixed it. I had internet download manager which was blocking it

[@Nsorkwame]

Thanks sir!

[@KamilSec]

Most welcome Kwame! Trust you are doing well.

[@Nsorkwame]

@@KamilSec Doing great sir! Thanks for asking….

[@benache9]

Well done

[@nobster146]

When you deleted "none" from risks you removed many open port detections that may not have a CVE with a CVSS associated, but are often some of the most exploited misconfiguration vulnerabilities. Just a heads up. Thanks for the video.

[@KamilSec]

Thanks for your comments and heads-up!

[@RichNugua]

Good info bro. How are you passing the analysis over to the admin, by email? @KamilSec

[@KamilSec]

If you are on the same government domain, yes otherwise follow the agency established channel of transmission...

[@Youonlyloseyourself]

If your company uses sharedpoint you could just create a file for this so all the engineers or anyone the data would be valuable to can grab it. Classified as a pull communication method

[@8starsAND]

Good content but unfortunately not applicable for large environments. In case you have hundreds, thousands or hundrets of thousands IP's in network you can not do that in excel...

[@KamilSec]

Yep, unfortunately you will need to use advance excel formulars like Pivot Table and so on if you have that many IPs