| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information | ||
| Id | 65592b16-4367-42c5-a26e-d371be450e17 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Risk Assessment control | ||
| Additional metadata |
Name/Id: ACF1558 / Microsoft Managed Control 1558 Category: Risk Assessment Title: Vulnerability Scanning | Correlate Scanning Information Ownership: Customer, Microsoft Description: The organization correlates the output from vulnerability scanning tools to determine the presence of multi-vulnerability/multi-hop attack vectors. Requirements: Azure Security reviews all vulnerability reports produced by the scanning tools used within Azure. Azure Security then reviews the vulnerabilities with Azure service teams. Vulnerability information is then correlated using DevOps and analyzed from a high-level perspective to determine what the impact would be if particular vulnerabilities were exploited in the environment, and to determine the presence of multi-vulnerability/multi-hop attack vectors. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|