This three-day course prepares cybersecurity professionals to administer Rapid7 InsightVM across the vulnerability management lifecycle. Participants progress from deployment planning and scanning to platform administration, vulnerability analysis, reporting, and remediation.
Duration 3 Days – 21 hrs.
Objectives
- Explain InsightVM architecture and the roles of the Security Console, Scan Engines, and Rapid7 Agents.
- Configure sites, asset scope, scan templates, schedules, and authenticated scans.
- Organize and analyze asset and vulnerability findings to prioritize risk.
- Create dashboards and reports for technical and management stakeholders.
- Track remediation through projects, goals, and service level agreements.
- Manage users, permissions, integrations, and routine platform maintenance.
Target Audience
- Vulnerability management administrators
- Cybersecurity and security operations professionals
- IT and systems administrators responsible for scanning and remediation
- Security analysts and engineers who manage InsightVM findings
Prerequisites
- Working knowledge of networking, operating systems, and common vulnerabilities
- Familiarity with vulnerability scanning and patch management concepts
- Basic experience administering Windows or Linux systems
- Access to an InsightVM training environment for course activities
Course Outline
Day 1 — Deployment, Configuration, and Scanning
Module 1: InsightVM Fundamentals and Architecture
- Vulnerability management workflow and InsightVM components
- Security Console, Scan Engines, and Rapid7 Agents
- Deployment planning and scan coverage
Module 2: Asset Organization and Scan Scope
- Sites, asset groups, and tags
- Asset inclusion, exclusions, and discovery
- Selecting Scan Engines and scan templates
Module 3: Scan Configuration and Execution
- Scan schedules and scan performance considerations
- Shared and site-specific credentials
- Authenticated scanning and credential troubleshooting
- Monitoring scans and reviewing results
Guided Lab
- Configure a training site with asset scope and exclusions.
- Select a Scan Engine and scan template.
- Configure credentials and a scan schedule.
- Run an authorized scan against training assets.
- Review scan status and investigate authentication issues.
Day 2 — Administration, Analysis, and Reporting
Module 4: Users and Platform Administration
- User roles and permissions
- Administrative settings and Scan Engine management
- Updates, backups, and data retention
Module 5: Vulnerability Analysis and Risk Prioritization
- Reviewing asset and vulnerability details
- Querying and filtering findings
- Interpreting risk information and selecting priorities
Module 6: Dashboards and Reporting
- Building dashboards for different stakeholders
- Creating and distributing reports
- Tracking trends and compliance requirements
Guided Lab
- Configure a training user with appropriate permissions.
- Analyze scan findings and filter assets and vulnerabilities.
- Identify remediation priorities.
- Build a stakeholder dashboard.
- Generate a report communicating risk and recommended actions.
Day 3 — Remediation, Integration, and Practical Review
Module 7: Remediation Management
- Creating and managing remediation projects
- Assigning work and validating fixes
- Defining goals and service level agreements
Module 8: Integrations and Operational Workflows
- Using InsightVM data with connected security tools
- Supporting security operations through analysis and reporting
- Maintaining an ongoing vulnerability management workflow
End-to-End Practical Lab
- Create a remediation project using training findings.
- Assign remediation work.
- Define a goal and service level agreement.
- Validate a sample fix through a rescan or prepared before-and-after results.
- Update reporting to reflect remediation progress.
- Map an integration workflow from InsightVM findings to the team responsible for remediation.
