Rumble 1.10 Continuous Scans, Site Defaults, and More!

Updated

Overview #

Rumble 1.10 is live with continuous scanning, user interface updates, an event log, updates to the scan engine, additional fingerprints, and a new way to keep recurring scans in sync with their sites!

Continuous Scanning #

All paid plans now support a new Continuous scanning option. This will run scans back-to-back, pausing only to apply agent updates. For folks who want to keep a close eye on their networks, continuous scans bring you fresher data, faster.

An agent running continuous scans will not run additional scans unless the Concurrency setting is increased beyond 1. Out-of-date agents will be upgraded prior to new scans being run. For the few agents where upgrades are impossible (read-only partitions, network filters, etc), this can delay each scheduled scan by up to five minutes.

Screenshot of Rumble continuous scan scheduling

Keep Scans in Sync with "defaults" #

Recurring scans can now resolve the targets, exclusions, and default TCP port lists at launch time through the use of "defaults".

Setting the Discovery Scope or Excludes to this string is an easy way to keep your scans in sync with your Site scopes. Updates to your site configuration will immediately apply to any recurring scans using these settings.

In addition to scan targets and exclusions, the TCP Ports option now also takes the option of "defaults". This expands at launch time to the current list of default ports in Rumble. As we add new services to this list, this prevents older scans from falling out of sync.

Screenshot of Rumble scan configuration

Monitoring the Event Log #

Users with Superuser privileges can now monitor the Event Log for their Rumble account. This log tracks all significant account activity, including agent connections, scan launches, user logins, and account lockouts. The Event Log is a work in progress and will become the main data source for our upcoming overhaul of alerts and notification rules.

Screenshot of Rumble event log

User Interface Updates #

The Rumble user interface received a slight update to match our new website. Let us know what you think!

Rumble Application Website

Release Notes #

The complete release notes for v1.10.0 can be found in our documentation

If you haven't had a chance to try runZero before, or would like to play with the new features, sign up for a free trial and let us know what you think!

Written by HD Moore

HD Moore is the co-founder and CEO of runZero. Previously, he founded the Metasploit Project and served as the main developer of the Metasploit Framework, which is the world's most widely used penetration testing framework.
More about HD Moore
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.


Related Articles

runZero Research
Active Asset Discovery in OT networks: runZero and the NREL/CECA Report
The Cohort 2 report describes how runZero safely discovers devices in a large, complex OT/ICS environment. Learn more about runZero's discovery...
runZero Research
AI in CAASM: The Risks of LLM Data in Security-Critical Workflows
Current generation AI tools provide appealing answers but struggle with a crucial challenge: knowing the truth, which poses great security risks.
runZero Research
SSHamble: Unexpected exposures in the Secure Shell
We conducted a deep dive into the SSH ecosystem and identified vulnerabilities across a wide range of implementations. During the research process,...
runZero Research
Attack Surface Challenges with OT/ICS and Cloud Environments
Learn why successfully navigating changes to operational technology and cloud attack surfaces is critical for successful asset security.

See Results in Minutes

Get complete visibility into IT, OT, & IoT — without agents, credentials, or hardware.

© Copyright 2024 runZero, Inc. All Rights Reserved