Development of Asset Mapping External Attack tool
summary
Built an automated asset-mapping pipeline that pulls from AWS, Azure and internal services into a containerized plugin framework, correlates Qualys vulnerability output and Splunk logs, and pushes summaries to Google Sheets for tracking. A Python orchestration script registers missing hosts over a year — little change in months 1–6, then steady monthly registrations that close most coverage gaps — and flags internet-exposed internal hosts with open ports and active CVEs, improving visibility and enabling targeted remediations.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:04Team mission and challenges
- 2:47Limitations of solutions
- 3:49Vulnerability management overview
- 5:56Need for automation
- 6:39System architecture and design
- 8:05Python script and Sheets demo
- 10:34Scanning external perimeter
- 11:38Combining assets and vulnerabilities
- 12:22Results and impact
- 12:43Vision for attack surface management
- 13:47Conclusion
- 14:35Q&A
related talks
32mAutomating Web Application Bug Hunting
48mMonitoring Application Attack Surface and Integrating Security into DevOps
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
01h 00mVulnerability management at scale drives enterprise transformation
20mEvolving from patch management to risk mitigation
33mVulnerability Management Lifecycle in DevSecOps