Another important aspect of keeping our endpoint secure
is to do appropriate updates and patches, especially when
they're associated with some security
vulnerability in that system.
So a big part of knowing what you have out there is
having a good inventory system that says,
we have this number of Windows computers
that are running Windows version 10 with this
build, we have this many Linux, we have this many Mac,
we have these types of mobile devices.
So having the inventory in place that identifies with what's
out there is a huge first step.
And then we need to keep on top of the updates WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we need to keep on top of the updates
from those vendors regarding security updates and fixes
and patches so that we can go ahead and deploy those.
Now one of the major sources is going
to be the vendor's website and their feeds regarding
updates and patches.
But what's also really convenient
is that here on talosintelligence.com,
if we go into vulnerability information,
there's a dropdown for Microsoft advisories.
This is a fantastic resource right here as part of Talos
regarding Microsoft.
And this is the certified Snort Rule information for Microsoft
security advisories.
And click on this button here. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And click on this button here.
These are sorted by year.
If we click on one of the Microsoft advisories here,
it'll give us the details on it, including when it was released,
has the CVE number, then it has the score,
and also the details regarding why
that score is what it is based on that scoring system.
As we scroll down, has additional details
on that vulnerability.
So the key is, we'd want to, first of all
be aware of our inventory, be aware of updates, including
security updates that are applicable to our operating
systems and applications, and then
we'd want to go ahead and deploy them.
Now, as far as deploying them, that also WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now, as far as deploying them, that also
involve going through change management.
So we'd want to test out the update first,
make sure it doesn't have a negative impact.
And then as quickly as possible, in an organized fashion,
communicating it to our end user community,
we'd want to implement those updates.
And that way we don't have any device sitting there
with a known vulnerability just waiting
to be taken advantage of.
So I'd like to thank you for joining me
in this set of videos regarding endpoint security.
It's been a pleasure having you.
And I'll see you in the next set of videos.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I'd like to thank you for viewing.