I have been tasked with using Qualys Vulnerability Scanner in order to perform scans within a large enterprise network. Within this network there are Windows machines and Linux machines. CyberArk has been installed but not yet implemented.
The idea is to scan the network even using the relative credentials, but the problems are:
1) CyberArk needs to be populated with the relative entries (user+password)
2) Linux/Unix hosts need to be scanned as well, but inserting the username+password on each asset, in a large enterprise network, is painstakingly hard.
An idea is to create local user accounts on each build of new machines, in order to be able to perform these scans -at least- for the new PCs, but what about the old ones? What could be an effective strategy in order to perform authenticated scans effectively, with a regard to security best practices?
Thanks in advance