What is your favorite online malware analysis scanning tool?

Security & GRC Threat & Vulnerability Management

1.7k views4 Upvotes4 Comments

Sort by:

CIO in Consumer Goods6 years ago

Fireye , falcon sandbox

Individual Contributor of IT in Services (non-Government)6 years ago

Panda Dome

1

Director Certifications in Education6 years ago

360 Total Security

ISSO and Director of the IRU in Healthcare and Biotech6 years ago

We use Fireye

Content you might like

Zoom Video Communications has agreed to pay $85 million to settle a California lawsuit. They have been accused of improperly sharing customer information with Facebook, Google and LinkedIn and allowing strangers to enter unprotected Zoom meetings in an activity known as "Zoombombing." Have you ever been "zoombombed" in a meeting?

Yes60%

No39%

The software industry needs to create a better model of vulnerability management.

Strongly agree6%

Agree74%

Neutral14%

Disagree1%

Strongly disagree3%

Unsure (explain in the comments)

View Results

Apart from applying the patches just released, what other mitigation tactics are you using to address the zero-day SharePoint vulnerabilities impacting on-premises servers?

Does someone have advice on how they have balanced the risk/reward as it relates to introducing Open-Source Software to organization? My org is dipping its toe into the OSS world and the architecture and risk governance teams are looking to get ahead of these requests by coming up with policies and standards for OSS technology being brought into our environment. To clarify, this is not for software development and CI/CD pipelines, SDLC etc. This is for installing solutions that already exist out there (Zabbix, GreyLog, Prometheus etc.) into the organization's environment. We are looking to provide a balance on the obvious risk with the ability to move fast (like everyone else now).

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?