Information & Alert Aggregation
•Module 1: Nmap for asset inventory, attack surface management, and vulnerability scanning
•Module 2: Security assessments using MITRE ATT&CK and D3FEND
•Module 3: Simple web application scanning using Arachni and ZAP
•Module 4: Leveraging an assessment questionnaire to identify gaps in your security program
•Module 5: Prioritization of security efforts using the Pareto Principle and an assumed breach mentality