Network scanning and mapping entails the identification devices, systems,
application and segments within our network.
This goes through and it utilizes different tools to identify different services.
These services can include things like SSH but not just SSH.
What version of SSH are we running? Are we running? Windows operating systems?
If so what operating system version are we? Are we running a
pack?
If we can identify the different services
and applications utilized within our network,
we're better prepared to protect those different software tools.
I want you to imagine that you're using an entire network
and you're in charge of this network of over 1000 clients.
There's no way that you can know every
single client that's operating on your network.
You can go through and determine, hey, I'm running
Windows 10 pcs across the entire network.
But yeah, it's Windows 10. What version or what software pack are you utilizing?
Are all of them using Microsoft
Office? Are you using some Adobe Acrobat?
Maybe a little bit of Firefox over here and chrome over there.
It's important to understand what applications am I using
across my network across the different pcs on my platform
by understanding the different applications,
we can better remediate the flaws and vulnerabilities associated with those.
We don't want to pay attention to different vulnerabilities or
flaws that have nothing to do with our network.
If there's no installed Microsoft office across any of our machines,
there's no reason to patch for Microsoft office.
Now, obviously,
we're probably going to use Microsoft office across most of our network,
but we need to understand when it comes down to it.
What do I really need to concentrate my efforts on as our services go?
How are my network set up? Are they segmented in specific ways?
I ran into a network where they had the entire operations department on one Vlan,
the hr department was on a different Vlan
and you get kind of get the point.
They had each department segmented off into its own Vlan and within each Vlan,
they were able to identify
by operating systems they were utilizing within that uh within that Vlan,
within the Vlan, they identified
the subnet,
they identified the operating system and then they were able
to identify what software versions and what applications were running.
This provided a more efficient networking across the board.
Angry IP scanner provides users with a
lightweight fast and straightforward network scanning solution.
This is available across many platforms including Windows,
mac and Linux and it prevents a range
of features designed to streamline the scanning process.
It identifies certain things like what IP address.
I'm operating on if there's specific uh uh host names or ports,
it even detects different web applications that may be running
on those specific uh IP addresses that associated with it.
It also provides us an output files such as CSV, text XML or even HTML overall.
Angry IP scanner provides us
aui based scanning solution that's very lightweight,
fast and appreciative across many different platforms.
Maltego
is a versatile tool utilized for information gathering,
network scanning and mapping.
It provides a visualization for the tool from an outside perspective,
meaning that it utilizes open sources intelligence
to gather data about our network.
If we have something hidden deep inside of
our network and it's properly fortified or defended,
Maltego is most likely not going to be able to fight it,
but it does provide us that outsider viewpoint.
What is the attacker looking at?
How can they see what's going on inside of our network?
It uses this data mining and aggregation to provide different
patterns and interconnected versatile segment to really kind of outline.
Hey, this is what the attacker can see.
Maybe I should protect my features a little bit better.
Now,
Maltego goes way beyond just scanning for network
segments within our uh within our enterprise environment.
It goes into social engineering.
It provides us some open source intelligence gathering.
It provides data wrench rate capabilities and
collaborative features based on different plugins.
Those plugins can go anything from looking at Facebook and linkedin
to going through Google it just draws a plethora of tools.
We can literally spend an entire day just
talking about Maltego and all its features.
But what you really need to understand when it comes to Maltego or CYS A is
that it has the ability to look at
an outsider's perspective into our internal network.
And it does more than just providing network mapping and scanning.
It goes beyond that providing open source intelligence gathering techniques.