Shellshock: Detect and Defend with Qualys

The November 2020 Qualys Tech Series walks you through best practices for managing asset tags and dashboards in Global IT Asset Inventory. We will also cover the migration from AssetView to Asset Inventory and how to ensure a smooth transition.

This session will cover:

- AssetView to Asset Inventory migration
- Tagging vs. Asset Groups - best practices
- Dynamic tagging - what are the possibilities?
- Creating and editing dashboards for various use cases

The Qualys Tech Series is a monthly technical discussion focusing on useful topics and best practices with Qualys. Each session includes a live Q&A – please post your questions during the session and we will do our best to answer them all.

Securing IT requires a complete remediation cycle that goes beyond vulnerability management to include patch deployment as well. Qualys patch management functionality automatically proposes the appropriate patches and deploys them in one click.

Qualys invites you to join a webcast with Predashen Nair, Group Manager, Infrastructure Services at SPAR Group, the world’s largest food retail chain to discuss Qualys’ effective patch management solution, available stand-alone or as part of Qualys VMDR.

Predashen will discuss how the integrated patch management functionality in Qualys simplifies operations, reduces cost, and enhances overall IT security.

The webcast will cover:

- How the integrated patch management functionality streamlines and accelerates vulnerability remediation
- How Qualys proactive patch management, covering security and non-security patches, seamlessly fits into the SPAR environment
- SPAR’s journey from selection of Qualys to implementation and results

Are you sure you're scanning all of your assets? Join the Technical Series with a Qualys Security Solution Architect to learn how vulnerability scans work and how to get the most out of them for your environment.

This session will cover:

- The anatomy of a Vulnerability Scan - The scan process (host discovery, port discovery, service discovery, vulnerability scan) and option profiles.
- How to set up, use and troubleshoot Authentication Records.
- Scanning strategies - Light Inventory vs Map, full-range vs targeted scanning, scanning cloud agent assets.
- Scanning best practices - Firewalls, the natural enemy of vulnerability scanning, VLAN trunking, seamless scaling for scanner appliances.

Do you rely on manual discovery and asset classification? Is your CMDB inaccurate, incomplete or outdated?

Asset management, service impact analysis, IT security and compliance are all at risk without accurate configuration data.

In today’s digital environment, it is impossible to sustain those initiatives without a system in place to help monitor the underlying infrastructure, continuously assess risks and enable users to deliver business value.

In this webinar:

- Learn how to build a global IT asset inventory that is always up-to-date, automatically categorized and enriched in real time.
- Discover the importance of continuously collecting rich telemetry for hardware and software configurations across on-premises, cloud, containers, remote endpoints, and even IoT.
- Hear guest panelists share use cases and discuss how the integration helps them achieve business objectives.
- Review the benefits of the certified Service Graph Connector program and get your questions answered.

Nordics/Benelux users take your Vulnerability Management to the next level.

With the rise of hybrid infrastructure, the vulnerability management landscape is rapidly changing. Misaligned workflows and disparate toolsets and processes often hinder security and IT teams from remediating the right set of vulnerabilities to reduce cybersecurity risk.

Marco Rottigni - Chief Technical Security Officer EMEA - will discuss these challenges and illustrate through a live demo why Qualys Vulnerability Management, Detection, and Response (VMDR®) represents an effective solution to augment visibility, empower prioritization and accelerate remediation at the speed of business, all through a single integrated solution.

In the webinar, you will learn to:

- Detect all assets across a hybrid network
- Identify vulnerabilities and misconfigurations in real time
- Automatically prioritize the riskiest vulnerabilities using advanced correlation and machine learning
- Deploy the most relevant patches to instantly mitigate risk from critical vulnerabilities

Can you find all the assets on your network, both those you know about and those you don’t? And once you do, can you see the details of each asset such as their security and compliance posture? Qualys Global IT Asset Inventory offers this and much more. It reduces the asset management effort and provides a solid foundation for IT Security and Risk Management, because you can’t secure what you can’t see.

During this webinar, we will explore how to:

- Perform an accurate IT asset inventory in a complex hybrid environment
- Use Qualys sensors as your ‘eyes on the network’
- Continuously control and manage the inventory process through customizable dashboards
- Leverage Qualys Global IT Asset Inventory to build an effective Vulnerability Management program

Join us for this Qualys Technical Session and learn more about the free Global IT Asset Inventory app.

Qualys invites you to join a webcast with IBM to discuss Qualys’ Vulnerability Management, Detection and Response (VMDR®) integration with IBM QRadar.

This integration provides you with the ability to automatically create your global IT asset inventory, detect and prioritize vulnerabilities and misconfigurations as well as handling remediation all without leaving the SIEM. The native integration brings the visibility necessary to better handle security and compliance incidents thus maximizing your investment in QRadar.

The webcast will cover:

The key elements of a Modern Vulnerability Management program.
The simplicity of deploying, at scale, Qualys VMDR including how it:
- Enriches QRadar with Qualys Asset Inventory, vulnerability and security telemetry to provide you with 360° visibility from within QRadar.
- Delivers an all-in-one Vulnerability Management, Detection, and Response solution fully integrated with QRadar.
Provides syncing and storing of all vulnerability detections directly against the assets in QRadar.
The value of the Qualys IBM X-Force Red partnership.
Q&A.

Managing certificates still remains one of the biggest challenges modern organizations face. This is especially worrying given the dependency on digital certificates continues to grow at a rapid pace.

Getting insight into ALL your digital certificates in a single place (not a spreadsheet) would be a massive gain for most organizations.

Qualys has you covered here, and provides extensive inventory, monitoring and vulnerability assessments of all certificates inside your organizations, using all the Qualys sensors you have already deployed.

Join us for this short but insightful web session to see what we can do for you today.

See how to:

- Create the inventory
- Assess the spread of certificates inside and outside
- Identify weak certificates
- Renew certificates

It is our pleasure to invite you to EDR Live – the unveiling of our new Multi-Vector EDR solution that brings the unifying power of our cloud platform to EDR. As you will see and hear, our multi-vector approach to EDR not only allows for the reduction of false positives but also makes it easier to automate the response and greatly reduce the response time and costs.

Agenda:

11:00 - Introduction by Philippe Courtot, Chairman & CEO
11:05 - Bringing the Unifying Power of the Qualys Cloud Platform to EDR, by Sumedh Thakar,
President and Chief Product Officer
- The Unifying Power of the Qualys Cloud Platform
- Introducing Qualys Multi-Vector EDR Overview and Threat Hunting Demo
- XDR the Next Frontier
12:00 - Live Q&A with Philippe Courtot, Chairman and CEO, Sumedh Thakar, President and Chief Product Officer, Ben Carr, Chief Information Security Officer, Vishal Salvi, CISO and Head of Cybersecurity Practice, Infosys Ltd.

As an app built natively on the Qualys Cloud Platform, Qualys Multi-Vector EDR leverages its power, scale and accuracy to provide unprecedented visibility and telemetry by collecting security data from endpoints, adding context and correlating billions of global events with threat intelligence, analytics and machine learning. Qualys Multi-Vector EDR not only stops sophisticated multi-vector attacks, but it also automatically orchestrates the appropriate response for faster and effective protection.

Cloud computing has changed the dynamic of how assets and workloads are designed, implemented and provisioned. It also brings new security challenges including an increased focus on DevOps and rapid deployment cycles.

This webinar will:

- Demonstrate how to leverage existing automation tools to integrate Qualys into your EC2 pipelines
- Review cloud computing security challenges
- Show how Qualys APIs can be used to automate key tasks
- Help you discover scripts, cloud formation templates and other automation resources on the Qualys Github

The unprecedented shift towards remote working caused by the COVID-19 crisis has created significant new IT and cybersecurity challenges. Remote employees working from home need to be managed drastically different than those on a corporate network. Detecting malware, vulnerabilities and patching hundreds of thousands of remote computers through VPNs is one of the top issues.

Join Philippe Courtot, Chairman and CEO, Sumedh Thakar, Chief Product Officer and President, and Chris Carlson, VP Product Management for a discussion on the issues related to securing the remote workforces and a demo of Qualys’ Remote Endpoint Protection offering, which is free for 60 days.

Agenda: (35 minutes total)

• Intro – Philippe Courtot, Chairman and CEO
• Qualys Remote Endpoint Protection – Chris Carlson, VP Product Management
• Demo – Chris Carlson
• Q&A – Sumedh Thakar, Chief Product Officer and President; Chris Carlson

Qualys Technical Series is a new, live online training series taking place on the second Thursday of the month. Each month, we’ll discuss a new topic starting with a general introduction walkthrough (40 min) followed by a live Q&A (20 min).

Join us this month as we present Qualys Patch Management (PM) and showcase how you can use it use to solve your specific problems and use cases.

Learn how to:

- Prioritize your critical patches using VMDR
- Optimize your patching job strategy for different asset types
- Fine tune your queries and dashboards to manage your patching activity
- Use Qualys PM as a standalone app or with other tools like SCCM

The sudden surge of large numbers of employees working remotely presents new challenges in ensuring the security of these remote devices. Security professionals face a wide range of security issues requiring architectures that can scale quickly across rapidly expanding, changing and distributed workforces.

Join Randy Barr, Head of Product Security at Zoom, and Sumedh Thakar, Chief Product Officer and President at Qualys, for a discussion on the security concerns of remote workforces and how organizations can address them.

IT infrastructure is becoming increasingly hybrid, organizations not only have on-premises datacenter hosts and applications, but they also have cloud-based workloads and instances. IT DevOps teams are leveraging containerized environments and emerging technologies. To stay ahead of the changing threat landscape, security teams need to adapt their cybersecurity practices to shift left and build security in, and not bolt it on.

In this webinar, CIS Chief Product Architect, Adam Montville, and CIS Benchmarks Product Owner, Michelle Peterson, from the Center for Internet Security, will focus on how CIS Benchmarks help organizations improve cybersecurity by implementing security controls and recommendations that are a foundation of security hygiene. Hariom Singh, Director, Product Management, Compliance Solutions for Qualys, will discuss how organizations can implement proactive best practices at scale for real-time inventory, security hygiene, and contextual prioritization of threats to ultimately reduce time to remediation.

For many organizations, today’s vulnerability management programs involve different teams, disjointed solutions and inability to prioritize the most serious threats. Qualys VMDR provides an all-in-one, cloud-based app that unifies the vulnerability management process, with built-in:

- Asset inventory: know everything on your hybrid network
- Vulnerability assessment: identify all vulnerabilities
- Threat prioritization: surface the most serious threats
- Remediation: identify and deploy needed patches

Join this webinar to learn about the next generation of vulnerability management, and why Ovum declares “With VMDR, organizations can finally complete the vulnerability cycle within a single UI, delivering on the promise of driving Time to Remediation toward zero.”

Qualys webinar offers point-by-point rebuttal of false Rapid7 claims about VMDR.

At this critical time, when the capability of businesses to fend off hackers has been significantly reduced, and companies are suddenly grappling to secure a fully remote workforce, security professionals need the most factual, accurate information possible. Unfortunately, Rapid7 has chosen this time to launch fabricated claims against Qualys VMDR in a marketing program titled, “It’s Time to Quit Qualys: 10 reasons why Rapid7 is worth the switch.”

Join Philippe Courtot, CEO and Chairman at Qualys, and Sumedh Thakar, Chief Product Officer and President at Qualys, for a fact-based, point-by-point rebuttal.

In addition, Philippe and Sumedh will discuss how VMDR is changing the IT and Security industry.

Vulnerabilities continue to increase in number and severity, leaving security and IT teams overloaded with alerts and systems to patch. The future of Vulnerability Management must provide true, risk-based prioritization of threats and unify the entire vulnerability workflow - from discovery to remediation.

In this webinar, Brian Kime, Security and Risk Senior Analyst at Forrester, will discuss the challenges security and IT operations teams face. He’ll cover the need for prioritization and how to speed response and remediation for the most critical vulnerabilities. Prateek Bhajanka, Vice President, Product Management for Qualys, will present an integrated approach to  Vulnerability Management, Detection and Response (VMDR) that accelerates remediation and drastically reduces cost.

Containers are the most sought after development tool for microservices. Their simplicity and portability allow DevOps to create true agile builds within development cycles. However, this new kind of environment brings new set of security threats at every phase of this cycle—from unvalidated software entering the environment, to secrets being leaked, to runtime drifting and breaking immutable behaviors.

By outlining common security risks and practical use cases across every phase, this session helps security teams better understand how to efficiently manage security at the speed and scale of DevOps.

In this webcast, you will also learn:

- Security use cases at Build, Registry, and Runtime for containers
- Importance of visibility into your container assets
- Need for container-native vulnerability analysis
- Strategies to detect and address drifting runtimes

Ths webcast will also include a live demo and Q&A with the speaker.