The Security Bundle is a set of ITS-provided tools that are selected to cover specific areas of risks on UH-owned devices that could lead to a compromise or exposure of UH institutional data.
Sentinel One is an advanced malware protection software that protects computers from modern malicious threats, being offered by the University for its employees. Unlike legacy antivirus software that relies on static lists of known threats, SentinelOne utilizes behavioral AI to identify and neutralize sophisticated attacks—such as zero-day malware or memory-based exploits—in real-time. This system is designed to stop threats by monitoring apps or programs while they run, ensuring that malicious activity is stopped before it can compromise your data. The objective is to safeguard the university’s digital assets and ensure your systems and work is protected.
SentinelOne is required to be installed on all UH-owned endpoints (desktops, laptops) and servers. IT specialists are responsible for installing and managing SentinelOne. SentinelOne can be installed onto Windows, macOS, and Linux (RHEL, Debian derivatives).
For instructions on how to get started with using SentinelOne please visit the UH InfoSec SentinelOne page.
Tenable (Nessus) functions as our vulnerability management tool, utilizing both agents and scanners to identify security vulnerabilities such as system misconfiguration, missing patches/updates, and other security related issues within your environment. Tenable uses Nessus Agents which are lightweight vulnerability scanners installed directly on systems.
Tenable’s Nessus Agents are required to be installed on all UH-owned endpoints (desktops, laptops), and servers by UH IT specialists. IT specialists are responsible for installing agents, running scans, reviewing scan results, and remediating vulnerabilities. Tenable's Nessus Agents can be installed onto Windows, macOS, and Linux.
For instructions on how to get started with using Tenable Nessus Agents please visit the UH InfoSec Tenable page.
To address the mishandling of PII and UH Regulated Data, the University requires the use of Spirion, a commercial software product that is designed to search a computer for sensitive information (SSNs, credit card numbers, etc.). If any sensitive information is found, Spirion also provides the option to shred, redact, encrypt, or quarantine the information in question.
Spirion is required to be installed on all UH-owned endpoints (desktops, laptops) and servers by UH IT specialists. IT specialists are responsible for installing Spirion agents, running scans, reviewing scan results for Regulated data with the data owners, and taking appropriate action to secure or delete unsecured Regulated data. Spirion can be installed onto Windows, macOS, and Linux (RHEL only).
For instructions on how to get started with using Spirion, please visit the UH InfoSec Spirion page.
Think Before You Click! Beware of New ClickFix Attacks
What is ClickFix? ClickFix is a new technique used by cyber criminals that uses dialogue boxes containing messages that attempt to trick you into copy, pasting, and running malicious commands on your device. ClickFix typically involves giving instructions to fix technical issues, solve CAPTCHAs, ...
Read Article
