Framework mapping
MITRE ATT&CK® Enterprise mapping
sub-techniqueT1595.002 — Vulnerability Scanning
Tactics: Reconnaissance
Relationship: exact BMC concept coverage
Open the official ATT&CK object ↗Exact concept-title or alias match reviewed during the v0.2.5 catalog reconciliation.
MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. Bare Metal Cyber is not affiliated with or endorsed by MITRE.
What it means
Results vary with scan type, credentials, network position, asset inventory, plugin currency, and safe-check settings. Findings are evidence for analysis, not automatic proof of exploitable risk.
Why it matters
Reliable scanning provides repeatable visibility and supports remediation when results are validated and connected to asset ownership.
Practical focus
- Use authenticated scans where appropriate
- Cover internal, external, cloud, and application surfaces
- Validate important or surprising findings
- Track remediation and accepted exceptions
Common mistakes
- Scanning without an accurate target inventory
- Treating every finding as equally urgent
- Closing findings without verification
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: