A lot of scanners end up not running things because those things will make other alarms whistle. Not that its not a good thing to test alarms now and again but layer many scanners with spread schedules etc. and all day there's alarms going off. hence most will just touch surface and not actually do the duty.
not really useful in all cases but in enterprise there seems to be preference for less noisy even if that means sometimes u end up looking at some FPs.
ofc it all depends on context which way is good or bad.
i would imagine running something lighter and then for certain things running something like this as confirmation step (if its within acceptable risk to actually run something againsy target)
didnotread•1h ago
A lot of scanners end up not running things because those things will make other alarms whistle. Not that its not a good thing to test alarms now and again but layer many scanners with spread schedules etc. and all day there's alarms going off. hence most will just touch surface and not actually do the duty.
not really useful in all cases but in enterprise there seems to be preference for less noisy even if that means sometimes u end up looking at some FPs.
ofc it all depends on context which way is good or bad.
i would imagine running something lighter and then for certain things running something like this as confirmation step (if its within acceptable risk to actually run something againsy target)