Real-time vulnerability monitoring

At least one non-transitory computer-readable media storing instructions, comprising:

• first instructions that, when stored on at least one first memory of at least one server and executed by at least one first processor of the at least one server, cause the at least one server to:
• identify first vulnerability information utilizing second vulnerability information that is used to identify a plurality of potential vulnerabilities, the first vulnerability information being identified by:
• identifying at least one operating system of a plurality of devices, and
• based on the at least one operating system, identifying at least one of the plurality of potential vulnerabilities as an actual vulnerability of a plurality of actual vulnerabilities of the at least one operating system to which the plurality of devices is actually vulnerable;
• and
• communicate, from the at least one server and to at least one of the plurality of devices over at least one network, the first vulnerability information;
• second instructions that, when downloaded and stored on at least one second memory of the at least one device and executed by at least one second processor of the at least one device, cause the at least one device to:
• receive, from the at least one server and at the at least one device over the at least one network, the first vulnerability information,
• store the first vulnerability information on the at least one second memory, and
• receive the first vulnerability information from the at least one second memory, the first vulnerability information corresponding with the actual vulnerabilities of the at least one operating system of the at least one device, and excluding at least a portion of the second vulnerability information that does not correspond with the actual vulnerabilities of the at least one operating system of the at least one device;
• third instructions that, when downloaded and stored on the at least one second memory of the at least one device and executed by the at least one second processor of the at least one device, cause the at least one device to:
• identify a first portion of the first vulnerability information that includes data inspection-related information that corresponds with at least one of the actual vulnerabilities of the at least one operating system of the at least one device, and that excludes other data inspection-related information of the second vulnerability information that does not correspond with the actual vulnerabilities of the at least one operating system of the at least one device,
• identify a first event of a plurality of events in connection with the at least one device,
• cause a determination that the at least one of the actual vulnerabilities corresponding with the data inspection-related information is susceptible to being taken advantage of by the first event identified in connection with the at least one device, utilizing the data inspection-related information,
• identify a second event of the plurality of events in connection with the at least one device, and
• cause a determination that the at least one of the actual vulnerabilities corresponding with the data inspection-related information is not susceptible to being taken advantage of by the second event identified in connection with the at least one device, utilizing the data inspection-related information;
• fourth instructions that, when downloaded and stored on the at least one second memory of the at least one device and executed by the at least one second processor of the at least one device, cause the at least one device to:
• identify a second portion of the first vulnerability information that includes traffic inspection-related information that corresponds with at least one of the actual vulnerabilities of the at least one operating system of the at least one device, and that excludes other traffic inspection-related information of the second vulnerability information that does not correspond with the actual vulnerabilities of the at least one operating system of the at least one device,
• identify a third event of the plurality of events in connection with the at least one device,
• cause a determination that the at least one of the actual vulnerabilities corresponding with the traffic inspection-related information is susceptible to being taken advantage of by the third event identified in connection with the at least one device, utilizing the traffic inspection-related information,
• identify a fourth event of the plurality of events in connection with the at least one device, and
• cause a determination that the at least one of the actual vulnerabilities corresponding with the traffic inspection-related information is not susceptible to being taken advantage of by the fourth event identified in connection with the at least one device, utilizing the traffic inspection-related information,
• fifth instructions that, when downloaded and stored on the at least one second memory of the at least one device and executed by the at least one second processor of the at least one device, cause the at least one device to:
• identify a third portion of the first vulnerability information that includes firewall-related information that corresponds with at least one of the actual vulnerabilities of the at least one operating system of the at least one device, and that excludes other firewall-related information of the second vulnerability information that does not correspond with the actual vulnerabilities of the at least one operating system of the at least one device,
• identify a fifth event of the plurality of events in connection with the at least one device,
• cause a determination that the at least one of the actual vulnerabilities corresponding with the firewall-related information is susceptible to being taken advantage of by the fifth event identified in connection with the at least one device, utilizing the firewall-related information,
• identify a sixth event of the plurality of events in connection with the at least one device, and
• cause a determination that the at least one of the actual vulnerabilities corresponding with the firewall-related information is not susceptible to being taken advantage of by the sixth event identified in connection with the at least one device, utilizing the firewall-related information;
• and
• sixth instructions that, when downloaded and stored on at least one third memory of at least one administrator computer and executed by at least one third processor of the at least one administrator computer, cause the at least one administrator computer to:
• in response to administrator action, cause setting, before the first and second events, of a first policy for the third instructions that is applied to a group including each of the plurality of devices that has the at least one operating system,
• in response to administrator action, cause setting, before the third and fourth events, of a second policy for the fourth instructions that is applied the group including each of the plurality of devices that has the at least one operating system, and
• in response to administrator action, cause setting, before the fifth and sixth events, of a third policy for the fifth instructions that is applied to the group including each of the plurality of devices that has the at least one operating system.