A vulnerability scan is the most popular method of identifying vulnerabilities. A vulnerability scan is a procedure that involves scanning a system for known flaws. These flaws can be identified in the software, hardware, or configuration of the system. Examining the system's logs is another technique to find vulnerabilities. The logs can be used to detect successful assaults as well as those that were tried but failed. The logs can also be used to detect systems and services that are susceptible. Examining the system's configuration is another technique to find vulnerabilities. The configuration can assist in identifying vulnerable settings, such as default passwords or passwords that are easily guessed. Insecure services, such as open ports can also be identified using this configuration.