Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Server-level permissions


In an organization, firstly you need to identify assets based on the type of server, where each server has a specific role to perform. Server-level roles are server-wide in their permissions scope. You can add server-level principals (server logins, user accounts, and Windows security groups) into server-level roles. Security groups can provide an efficient way to assign access to resources on your network:

  • Security groups in Active Directory: User rights are assigned to a security group to determine what members of that group can do within the scope of a domain or forest. For example, default domain admins have full permission on all server parts of that specific domain irrespective of server roles. However, we can create user defined groups and add the required user account to that group to limit access.
  • Windows service accounts: There are applications that run on Windows servers that need an account that is specific to that service. A service account helps in solving...