It_is_possible_to_guess_the_remote_operating_system._Tenable.io_General

Alert

It is possible to guess the remote operating system. ( It is possible to guess the remote operating system.)

SK4 unified event:
Connector/Service

Tenable.io/General

SK4 Version:

2.4

Created Date:

Tue Jun 04 2019 07:50:12 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:10:32 GMT+0000 (Coordinated Universal Time)

Category

Security Alert

Description

Using a combination of remote probes (e.g., TCP/IP, SMB, HTTP, NTP,SNMP, etc.), it is possible to guess the name of the remote operating system in use. It is also possible sometimes to guess the version of the operating system.

Search query

cef_vendor="skyformation" cef_name="security-threat-detected" destinationServiceName="Tenable.io" act="detect" dpriv="VULNERABILITY" proto="OS Identification"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources