Tenable Nessus

This project demonstrates how Tenable Nessus Essentials was used to identify and fix an SMB signing vulnerability, which could expose systems to man-in-the-middle (MITM) attacks. It covers the scanning process, investigation, and remediation using Windows security policies, highlighting key troubleshooting steps and the importance of enforcing SMB signing for better security.

This lab explores resolving an **SSL certificate trust issue** flagged by **Tenable Nessus Essentials**. The scan identified a **self-signed certificate** causing a **broken certificate chain**, which could lead to **trust issues and MITM attacks** in production environments. The post covers the investigation, implications, and solutions, including replacing the self-signed certificate with one from a **trusted Certificate Authority (CA).