Podcasts Technology Software Engineering Institute (SEI) Podcast Series A Penetration Testing Findings Repository

A Penetration Testing Findings Repository

Published: June 13, 2023, 8:01 p.m.

b'

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI) \\xa0Marisa Midler and Samantha Chaves, penetration testers with the SEI\\u2019s CERT Division, talk with Suzanne Miller about a penetration-testing repository that they helped to build. The repository is a source of information for active directory, phishing, mobile technology, systems and services, web applications, and mobile- and wireless-technology weaknesses that could be discovered during a penetration test. The repository is intended to help assessors provide reports to organizations using standardized language and standardized names for findings, and to save assessors time on report generation by having descriptions, standard remediations, and other resources available in the repository for their use. The repository is available at https://github.com/cisagov/pen-testing-findings

\\xa0

'