When I work with clients and we discuss CIS Critical Control 2, their focus is often on inventorying their installed software. Today we’ll talk about inventorying software that you didn’t install. Malware is typically the primary target in that “we didn’t install that software” list.
Article Link: https://isc.sans.edu/diary/rss/25072