WEBVTT

1
00:00.000 --> 00:00.670 align:middle line:84%


2
00:00.670 --> 00:03.490 align:middle line:90%
Another important aspect of
keeping our endpoint secure

3
00:03.490 --> 00:06.598 align:middle line:90%
is to do appropriate updates
and patches, especially when

4
00:06.598 --> 00:08.140 align:middle line:90%
they're associated
with some security

5
00:08.140 --> 00:10.400 align:middle line:84%
vulnerability in that system.

6
00:10.400 --> 00:12.970 align:middle line:90%
So a big part of knowing
what you have out there is

7
00:12.970 --> 00:15.080 align:middle line:90%
having a good inventory
system that says,

8
00:15.080 --> 00:17.065 align:middle line:90%
we have this number
of Windows computers

9
00:17.065 --> 00:18.940 align:middle line:90%
that are running Windows
version 10 with this

10
00:18.940 --> 00:21.640 align:middle line:90%
build, we have this many
Linux, we have this many Mac,

11
00:21.640 --> 00:23.270 align:middle line:90%
we have these types
of mobile devices.

12
00:23.270 --> 00:26.110 align:middle line:90%
So having the inventory in place
that identifies with what's

13
00:26.110 --> 00:28.090 align:middle line:84%
out there is a huge first step.

14
00:28.090 --> 00:30.790 align:middle line:90%
And then we need to keep
on top of the updates
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

14
00:28.090 --> 00:30.790 align:middle line:90%
And then we need to keep
on top of the updates

15
00:30.790 --> 00:33.580 align:middle line:90%
from those vendors regarding
security updates and fixes

16
00:33.580 --> 00:36.220 align:middle line:90%
and patches so that we can
go ahead and deploy those.

17
00:36.220 --> 00:37.900 align:middle line:90%
Now one of the major
sources is going

18
00:37.900 --> 00:40.540 align:middle line:90%
to be the vendor's website
and their feeds regarding

19
00:40.540 --> 00:41.860 align:middle line:84%
updates and patches.

20
00:41.860 --> 00:43.270 align:middle line:90%
But what's also
really convenient

21
00:43.270 --> 00:46.060 align:middle line:90%
is that here on
talosintelligence.com,

22
00:46.060 --> 00:48.340 align:middle line:90%
if we go into
vulnerability information,

23
00:48.340 --> 00:50.770 align:middle line:90%
there's a dropdown for
Microsoft advisories.

24
00:50.770 --> 00:54.070 align:middle line:90%
This is a fantastic resource
right here as part of Talos

25
00:54.070 --> 00:55.450 align:middle line:84%
regarding Microsoft.

26
00:55.450 --> 00:58.270 align:middle line:90%
And this is the certified Snort
Rule information for Microsoft

27
00:58.270 --> 00:59.260 align:middle line:84%
security advisories.

28
00:59.260 --> 01:00.760 align:middle line:84%
And click on this button here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

28
00:59.260 --> 01:00.760 align:middle line:84%
And click on this button here.

29
01:00.760 --> 01:01.970 align:middle line:84%
These are sorted by year.

30
01:01.970 --> 01:04.239 align:middle line:90%
If we click on one of the
Microsoft advisories here,

31
01:04.239 --> 01:07.810 align:middle line:90%
it'll give us the details on it,
including when it was released,

32
01:07.810 --> 01:10.480 align:middle line:90%
has the CVE number,
then it has the score,

33
01:10.480 --> 01:11.920 align:middle line:90%
and also the details
regarding why

34
01:11.920 --> 01:14.920 align:middle line:90%
that score is what it is
based on that scoring system.

35
01:14.920 --> 01:16.900 align:middle line:90%
As we scroll down,
has additional details

36
01:16.900 --> 01:18.442 align:middle line:84%
on that vulnerability.

37
01:18.442 --> 01:20.150 align:middle line:90%
So the key is, we'd
want to, first of all

38
01:20.150 --> 01:23.680 align:middle line:90%
be aware of our inventory, be
aware of updates, including

39
01:23.680 --> 01:25.960 align:middle line:90%
security updates that are
applicable to our operating

40
01:25.960 --> 01:27.747 align:middle line:90%
systems and
applications, and then

41
01:27.747 --> 01:29.330 align:middle line:90%
we'd want to go ahead
and deploy them.

42
01:29.330 --> 01:31.030 align:middle line:90%
Now, as far as deploying
them, that also
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

42
01:29.330 --> 01:31.030 align:middle line:90%
Now, as far as deploying
them, that also

43
01:31.030 --> 01:33.270 align:middle line:90%
involve going through
change management.

44
01:33.270 --> 01:35.507 align:middle line:90%
So we'd want to test
out the update first,

45
01:35.507 --> 01:37.340 align:middle line:90%
make sure it doesn't
have a negative impact.

46
01:37.340 --> 01:39.910 align:middle line:90%
And then as quickly as possible,
in an organized fashion,

47
01:39.910 --> 01:42.070 align:middle line:90%
communicating it to
our end user community,

48
01:42.070 --> 01:43.815 align:middle line:90%
we'd want to implement
those updates.

49
01:43.815 --> 01:45.940 align:middle line:90%
And that way we don't have
any device sitting there

50
01:45.940 --> 01:48.190 align:middle line:90%
with a known
vulnerability just waiting

51
01:48.190 --> 01:49.415 align:middle line:84%
to be taken advantage of.

52
01:49.415 --> 01:51.040 align:middle line:90%
So I'd like to thank
you for joining me

53
01:51.040 --> 01:53.707 align:middle line:90%
in this set of videos
regarding endpoint security.

54
01:53.707 --> 01:55.040 align:middle line:84%
It's been a pleasure having you.

55
01:55.040 --> 01:56.832 align:middle line:90%
And I'll see you in
the next set of videos.

56
01:56.832 --> 01:59.170 align:middle line:90%
Meanwhile, I hope this has
been informative for you.

57
01:59.170 --> 02:02.790 align:middle line:90%
And I'd like to thank
you for viewing.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

57
01:59.170 --> 02:02.790 align:middle line:90%
And I'd like to thank
you for viewing.