Elements Exposure Management topic index

Open the interactive Elements Exposure Management user guide

Topics that several products share are listed under the product that owns them.

• WithSecure Exposure Management
• Get started with WithSecure Elements Security Center
• About access rights
• Adding a customer company
• Elements Exposure Management overview
• Why Exposure Management matters
• Understanding WithSecure Elements Exposure Management
• Key features
• Attack surface coverage
• Getting started with WithSecure Elements Exposure Management
• Get started with WithSecure Elements Exposure Management
• Create the first WithSecure business account
• Log in to Elements Security Center and start asset onboarding
• Create administrator accounts
• Grant existing users the Exposure Management role
• Asset onboarding
• Device onboarding
• Existing WithSecure Elements Agents
• Install new WithSecure Elements Agents
• Turn on or off WithSecure Elements Agent scanning on devices
• Change the frequency for endpoint status updates
• Devices without WithSecure Elements Agent
• Set up labeling rules for unmanaged devices
• Installing scan nodes on Windows server
• Install a scan node on Windows
• Verify installation
• Configure scan nodes
• Installing scan nodes on Linux servers
• Install a scan node on Linux
• Verify Linux scan node installation
• Linux scan node paths
• Configure Linux scan nodes
• Apply the scan node license manually
• Set up encryption keys for authenticated scanning
• Redirect traffic to a proxy server
• Disable SSL certificate validation
• Install a local CA certificate
• Limit the maximum number of simultaneous scans
• Update scan engines manually
• Reset scan engines
• Cloud account onboarding
• Add an Azure tenant
• Connect Identity Inventory for a tenant
• Adding Azure subscriptions
• Azure prerequisites
• Connect and activate Cloud Security Posture Management for a tenant
• Add an Azure subscription in Elements Security Center
• Run the Azure onboarding script
• Add an AWS account in Elements Security Center
• Deploy the IAM role to AWS
• Validate cloud account status
• Network asset onboarding
• Add a new network asset
• Identity onboarding
• Managing scans
• Device scans
• Discovery scans
• Add discovery scans
• Configure discovery scan templates
• Run discovery scans
• View the discovery scan results
• System scans
• Add system scans
• Configure system scans
• System scan configuration options
• Cloud account scans
• Add cloud account scans
• Create a new rule group
• Scan cloud accounts
• Network asset scans
• Identify internet-facing systems
• External attack surface scans
• Cloud scan nodes
• Identity scans
• Managing exposures
• Exposure dashboard
• Recommendations
• Recommendation impact, effort, and status
• Findings
• Exposure management for operational technology
• Reporting
• Create vulnerability management reports
• Add widgets to My report
• View vulnerability management reports
• Create exposure management reports
• Configure email reports
• Create a custom view for security events
• Edit the settings of an existing report
• Clone an existing report
• Update contents of existing reports
• View Executive summary
• Delete reports
• General management
• Device assets
• View device assets
• Tracking asset changes
• Manage device asset attributes
• Manage asset tags
• Update notes
• Delete device assets
• Delete archived assets
• Scan nodes
• Add new scan nodes
• Uninstalling scan nodes
• Uninstall scan nodes from Windows
• Uninstall scan nodes from Linux
• Troubleshooting scan node issues
• Delete cloud accounts
• Users
• Settings
• Troubleshooting
• Using Infrastructure-as-Code tools
• Implement infrastructure with Terraform
• Implement infrastructure with CloudFormation
• Authenticated scanning
• Windows authenticated scanning (WinRM)
• Preparing for Windows authenticated scanning (WinRM)
• Update PowerShell
• Create a dedicated user account
• Configure the WinRM service to use HTTP on individual hosts
• Configure the WinRM service to use HTTP through GPO
• Configure the WinRM service to use HTTPS with a publicly signed certificate
• Configure the WinRM service to use HTTPS without a publicly signed certificate
• Configure the WinRM service to use HTTPS without a publicly signed certificate on older Windows versions
• Create and export a certificate for a legacy Windows target
• Troubleshoot Windows authenticated scanning (WinRM)
• Windows authenticated scanning (RPC)
• Preparing for Windows authenticated scanning (RPC)
• Create a Windows domain account
• Disable Admin Approval Mode
• Group Policy best practices for authenticated scanning
• Create a new Group Policy object
• Add rule to allow traffic to the RPC Endpoint Mapper
• Add rule to allow traffic to the RPC Dynamic Ports
• Add rule to allow traffic to SMB/CIFS and RPC
• Enable Remote Registry service
• Grant read access to registry keys
• Add a scan node to the domain
• Configure a network scan template for Windows authenticated scanning
• Troubleshoot Windows authenticated scanning (RPC)
• Linux authenticated scanning
• Preparation steps
• Create new encryption keys
• Upload encryption keys to WithSecure Elements Security Center
• Upload encryption keys to WithSecure Elements VM scan node
• Prepare the user account for Linux authenticated scanning
• Authentication methods
• Set up password-based authentication
• Set up SSH keys on the Linux system
• Configure key-based authentication in Elements Security Center
• Troubleshooting
• Configuring Windows authenticated scanning (SSH)
• Enable the OpenSSH Server on the target host
• Scan settings for Windows update sources

All user guide topic indexes