A vulnerability scan shows the utilities portal as exploitable. The analyst still needs to know who logged in last night. What role do the scanner results play?
Select an answer to reveal the explanation.
Short Explanation
A pothole report is not a list of who drove the road. Scanner output says the utilities portal was weak; last night's logons still live in authentication logs.
Full Explanation
Vulnerability-management data (Qualys- or Tenable-style scanner output) is a useful defense source for what was exploitable on a civic asset. It is context for urgency and likely attack paths, not evidence of a login. Authentication and identity logs remain required to see who signed in. Scanner findings do not replace Asset and Identity lookups, and a CVE on a host does not prove a session succeeded.