Field notes on vulnerability management and security evidence.https://pentaroot.com/https://pentaroot.com/notes/assessor-scan-evidence/https://pentaroot.com/notes/assessor-scan-evidence/Each NIST SP 800-171 objective for scanning, remediation and flaw fixes, mapped to the evidence that shows it, and where evidence falls short.Mon, 09 Nov 2026 00:00:00 GMThttps://pentaroot.com/notes/scan-evidence-checklist/https://pentaroot.com/notes/scan-evidence-checklist/A fill-in checklist of the evidence an assessor expects for NIST SP 800-171 Rev 2 requirements 3.11.2, 3.11.3 and 3.14.1.Mon, 09 Nov 2026 00:00:00 GMThttps://pentaroot.com/notes/silent-scan/https://pentaroot.com/notes/silent-scan/How vulnerability scans fail quietly, why the report still looks clean, and how to detect it in Nessus, InsightVM and Qualys output.Mon, 09 Nov 2026 00:00:00 GMT