Lion Cipher Lab
Find end-of-life software across an inventory and avoid false alarms
- Cyber / Security Engineer
- Intermediate
- ~40 min
- Free · no account required
Why it matters
When software reaches end of life (EOL), its maintainers stop releasing security fixes. Every vulnerability found afterwards stays open forever, unless you upgrade. That makes EOL software one of the most reliable predictors of a breach, and CIS Control 2 asks organizations to ensure authorized software is currently supported, and to document exceptions where it is not. NIST SP 800-40 treats replacing unsupported software as part of enterprise patch management. Checking for EOL sounds simple: compare versions with end dates. Two mistakes make the simple check misleading. Checking only…
What you'll learn
- what end-of-life means for security
- supported, extended (paid) support and unsupported states
- checking components, not just operating systems
- why distro-packaged software follows the OS's support dates
- measuring false alarms and misses from simple checks
- getting reliable EOL dates
- planning upgrades with a warning window
Steps in this lab
- Supported, extended, unsupported
- The EOL table and the inventory
- Write the checker
- Run it three ways
- Keep the inventory honest, and plan ahead