Windows 11 Vulnerability Assessment with Nessus (Hands‑On)

TL;DR

I performed a credentialed Windows 11 vulnerability assessment using Nessus Essentials.
Findings: 1 Critical, 4 High, 1 Medium, 0 Low, 134 Info.
Top risks: Missing August 2025 cumulative security update (KB5063878), pending reboot for Windows Update, outdated Microsoft Teams desktop app (RCE), outdated Outlook update, WinVerifyTrust signature validation mitigation requirement.
Deliverables: this repo with screenshots, methodology, and a remediation plan that maps each issue to owner & fix path.

---

1) Scope & Environment

• Target: 192.168.56.102 (Windows 11 24H2 VM)
• Scanner: Local scanner (Nessus Essentials)
• Policy: Basic Network Scan with credentials
• Severity model: CVSS v3.0
• Scan window: 17 minutes
• Why this matters: Demonstrates ability to run authenticated scans, interpret plugin data, prioritize risk, and turn output into fixes.

Screens below show the host view, vulnerability summary, and individual plugin detail pages.