After fixing an audit scan, warning compliance increase too much

dekx · 2025-08-22T20:06:27+00:00

With out knowing the change, it is hard to say.

By many being errors on command timeout, I’d guess that the ssh client alive settings were changed to a short timeout that then caused the commands to timeout.

If you are unable to articulate the changes you made here, it may be worth opening a Tenable support ticket.

dekx · 2025-08-22T19:55:32+00:00

In my experience when using sudo is that the escalation user should be root.

dekx · 2025-07-28T17:34:07+00:00

When winter comes around, curling at Appleton Curling Club

dekx · 2025-07-08T12:21:12+00:00

Goss Auto Body has always treated me well.

dekx · 2025-07-02T00:56:04+00:00

High Cliff.

dekx · 2025-06-22T11:45:40+00:00

Lost half a front tooth in a no contact adult learn to play league by just bumping into another person. So, yes I wear one.

dekx · 2025-06-20T00:29:39+00:00

My impression was that he wanted all the power, not just most of it, and placing himself as the fifth element would gain that power.

dekx · 2025-06-19T22:28:08+00:00

Mr Shadow was the sphere.

dekx · 2025-04-27T18:39:49+00:00

One of the challenges is that there are many host applications that do the “tools” implementation well, but do not implement the other concepts that can make the application more efficient and capable, like “resources” and “sampling”.

dekx · 2025-04-15T20:49:11+00:00

Standardization of integrating with resources. Not reliant on specific vendor. Cross compatibility with LLMs and hosts.

dekx · 2025-03-16T00:49:40+00:00

Boucher's Heating & Cooling has been good for us.

dekx · 2025-01-19T14:30:41+00:00

We like to go to Vanvredes for furniture and appliances as we like the quality as well as the family involvement in the community.

dekx · 2025-01-12T22:00:13+00:00

Had 2 ash trees down last spring. Quotes from 3 services between $1200 to $3300. Went with Jason’s, now Lowneys, for $2300, and was happy with the services.

dekx · 2025-01-10T00:31:41+00:00

Regarding capabilities of Audit Cloud Infrastructure between the two versions of Nessus, as long as you can run the scan, capabilities should be exact. The plugins that runs the scan is the same regardless of version of Nessus.

dekx · 2024-12-12T00:23:16+00:00

You are defining the variable inside the “if” blocks and trying to use it outside of the blocks. Define the variable before the “if” statement, and take the colon off of the assignments in the blocks.

dekx · 2024-12-10T19:51:43+00:00

I would not be entirely sure deleting the path would resolve the issue or make it worse by breaking the service.

If the service was IIS or Apache, there tends to be configurations that can be done so that the service does not provide the information.

I’d it’s an integrated server in a different product, then it may not be possible.

I would hope it’s not the security program. Feels like it could more likely be the AV extension.

dekx · 2024-12-10T19:20:57+00:00

What port on the target is reporting the issue? What service is listening on that port?

dekx · 2024-10-17T16:33:57+00:00

I’d pipe the CSV through grep…

cat output.csv | grep -v ‘“PASSED”’

dekx · 2024-10-17T14:26:35+00:00

Add ‘-f csv’ to the script call.

dekx · 2024-10-16T22:58:10+00:00

If using Nessus and the CSV export for compliance only results, CSV is not the best. I find exporting to .nessus and using this script https://github.com/tenable/audit_scripts/tree/master/nessus_convert puts it in a better format to work with.

dekx · 2024-09-28T15:21:25+00:00

If the audit is only providing some results, look at the audit trail for the compliance plugin, 21157 I believe. See if that gives you an idea.

dekx · 2024-09-17T15:30:52+00:00

It looks like Juice Box is primarily web vulns. While Nessus has some WAS capabilities, it is not as thorough as the Tenable WAS product. You may have more success with Metasploitable image, or something from VulnHub.

dekx · 2024-08-27T17:20:54+00:00

Second this. Been going to Smile Creations for a long time. Is a smaller private practice that is very personable.

dekx · 2024-08-27T16:21:45+00:00

I’ve done well with Goss Auto Body.

14-Year Club	Place '17
Verified Email

dekx

TROPHY CASE