Verizon Risk Report

Includes the external risk vectors from level one and adds internal risk vectors sourced from Tanium and Cylance. These additional vectors are categorized by malware, unwanted programs, dual use tools, and infrastructure issues. 

• • Unexpected running services
  • End of life software in use
  • Vulnerable rmware versions
  • Systems in poor health
  • Endpoint visible wireless networks
  • Dual homed devices
  • Unusual connections
• • Anomalies/miscon gured password & audit policies
  • User misbehavior
  • SSL certi cate issues
  • Network segmentation
  • Unapproved established connections
  • Application risks
  • Anomalies that could indicate compromise
• • Endpoints with generic malware, ransomware, trojans, fakeAVs, backdoors, viruses, downloaders, rootkits, infostealers, remnants, worms, exploit attempts, droppers, or bots
  • Endpoints with generic potentially unwanted programs, adware, games, keygens, toolbars, scripting tools, remote access tools, corrupted PUPs, hacking tools, or portable applications
  • Endpoints with dual use tools, remote access tools, password crackers, cracking software, or monitoring tools

Includes the external risk vectors from level one, the internal risk vectors from level two, and adds culture and process risk vectors sourced from a custom tailored Verizon audit. These additional threat vectors include:

• • External vulnerability
  • IP reputation
  • NetFlow
  • Web applications
• • Internal vulnerability
  • E-Mail filter
  • Firewall
  • Endpoint systems
• • Phishing
  • Physical issues
  • Policy, process, and procedure
  • Wireless

Future availability of Level 3 is scheduled for 2019