Now we're scanning and mapping entails the identification of devices, systems, application and segments
within our network.
This goes through and it utilizes different tools to identify different services.
These services can include things like SSH but not just SSH.
What version of SSH are we running?
Are we running windows operating systems?
If so, what operating system version are we running?
Are we running a service pack?
If we can identify the different services and applications utilized within our network, we're better
prepared to protect those different software tools.
I want you to imagine that you're using an entire network, and you're in charge of this network of
over 1000 clients.
There's no way that you can know every single client that's operating on your network.
You can go through and determine, hey, I'm running Windows 10 PCs across the entire network, but
yeah, it's Windows 10.
What version or what software pack are you utilizing Are all of them using Microsoft Office?
Are you using some Adobe Acrobat, maybe a little bit of Firefox over here and Chrome over there.
It's important to understand what applications am I using across my network, across the different PCs
on my platform.
By understanding the different applications, we can better remediate the flaws and vulnerabilities
associated with those.
We don't want to pay attention to different vulnerabilities or flaws that have nothing to do with our
network.
If there's no installed Microsoft Office across any of our machines, there's no reason to patch for
Microsoft Office.
Now, obviously, we're probably going to use Microsoft Office across most of our network, but we need
to understand when it comes down to it, what do I really need to concentrate my efforts on as far as
services go?
How are my networks set up?
Are they segmented in specific ways?
I ran into a network where they had the entire operations department on one Vlan.
The HR department was on a different Vlan, and you get kind of get the point they had.
Each department segmented off into its own Vlan, and within each Vlan, they were able to identify
what operating systems they were utilizing within that, within that Vlan.
Within that Vlan, they identified the subnet, they identified the operating system.
And then they were able to identify what software versions and what applications were running.
This provided a more efficient networking across the board.
Angry IP scanner provides users with a lightweight, fast and straightforward network scanning solution.
This is available across many platforms including windows, Mac and Linux, and it prevents a range
of features designed to streamline the scanning process.
It identifies certain things like what IP address I'm operating on, if there's specific, uh, hostnames
or ports.
It even detects different web applications that may be running on those specific IP addresses that are
associated with it.
It also provides us an output file such as CSV, text, XML, or even HTML.
Overall, angry IP scanner provides us a GUI based scanning solution that's very lightweight, fast,
and appreciative across many different platforms.
Maltego is a versatile tool utilized for information gathering, network scanning, and mapping.
It provides us visualization for the tool from an outside perspective, meaning that it utilizes open
source intelligence to gather data about our network.
If we have something hidden deep inside of our network and it's properly fortified or defended.
Maltego is most likely not going to be able to find it, but it does provide us that outsider viewpoint.
What is the attacker looking at?
How can they see what's going on inside of our network?
It uses data mining and aggregation to provide different patterns and interconnected, uh, versatile
segment to really kind of outline.
Hey, this is what the attacker can see.
Maybe I should protect my features a little bit better.
Now, Maltego goes way beyond just scanning for network segments within our within our enterprise environment.
It goes into social engineering.
It provides us some, uh, open source intelligence gathering.
It provides data enrichment capabilities and collaborative features based on different plugins.
Those plugins can go anything from looking at Facebook and LinkedIn to going through Google.
It just provides a plethora of tools.
We can literally spend an entire day just talking about Maltego and all its features, but what you
really need to understand when it comes to Maltego for Sisa is that it has the ability to look at an
outsider's perspective into our internal network, and it does more than just providing network mapping
and scanning.
It goes beyond that, providing open source intelligence gathering techniques.