How to scan for known exploits and ransomware?

This article explains two settings in network scan profiles: tests for vulnerabilities with known exploits and tests for vulnerabilities exploited by ransomware.

You find both settings under Vulnerability selection when you create or edit a network scan profile.

• Include tests for vulnerabilities with known exploits: Tests for vulnerabilities that have a known exploit. An exploit is a script or piece of code that takes advantage of a vulnerability. When an exploit is known, cybercriminals can more easily use it to attack the vulnerability.
• Include tests for vulnerabilities exploited by ransomware: Tests for vulnerabilities that are known to have been exploited in ransomware attacks, for example by ransomware that uses a vulnerability to spread in a network.

Are these tests included by default?

Yes. The default Full scan configuration includes both settings, so you do not need to change anything.

How do I scan for these vulnerabilities only?

To scan only for vulnerabilities with known exploits or vulnerabilities exploited by ransomware, use the Basic scan configuration and turn on the setting you need.

1. Log in to Security Center.
2. Click Scan network > Scan profiles. 
3. Click +Add scan profile, or click the edit icon next to an existing profile.
4. Select the Basic scan configuration. 
5. Under Vulnerability selection, check one or both of these:
   • Include tests for vulnerabilities with known exploits
   • Include tests for vulnerabilities exploited by ransomware
6. Click OK.
7. Done!