Operations
Household System Health Lab
Planning household system health tracking through asset inventory, patch management, vulnerability assessment, and verified remediation.
ResearchProject at a Glance
Research- Purpose
- Planning household system health tracking through asset inventory, patch management, vulnerability assessment, and verified remediation.
- My Role
- Independent lab research, design, and documentation.
- Implementation Status
- This project is planned. Endpoint enrollment, scans, and measured results are not documented yet.
- Next Milestone
- Record patch success, pending reboots, and rollback steps during a controlled pilot.
Implementation repository: not yet published.
Implementation Status
This project is planned. Endpoint enrollment, scans, and measured results are not documented yet.
Proposed Architecture
OCS Inventory NG is a proposed self-hosted inventory layer for hardware and installed software. Compare its records with Action1 to identify missing devices and stale data; it does not replace vulnerability scanning or uptime monitoring.
Action1 is the proposed starting point for inventory and patch management on supported computers. Greenbone Community Edition (OpenVAS) is the proposed free, self-hosted vulnerability scanner. Storage health and service availability require separate monitoring checks.
Qualys Community Edition is an optional free cloud alternative; confirm current account eligibility and asset limits before choosing it. No paid scanner is required for the planned lab.
Inventory and Baseline
Record household computers, operating systems, software versions, and ownership. Check platform support before selecting agents or scan methods.
Health and Exposure
Track endpoint check-in, patch status, available disk space, and vulnerability findings. Review TrueNAS storage alerts and service availability separately.
Remediate and Verify
Pilot updates on a test system, schedule maintenance, record failures, and verify remediation with a follow-up check or scan.
Validation Checklist
- Confirm inventory coverage and identify unsupported or offline devices.
- Record patch success, pending reboots, and rollback steps during a controlled pilot.
- Compare vulnerability findings before and after remediation, including exceptions and false positives.
- Test a health alert and record detection, investigation, and recovery times.
Evidence to Publish
Publish sanitized dashboards, a patch runbook, a remediation timeline, and observed test results. Keep device identifiers and household data private. No coverage, uptime, or risk-reduction claims are made before measurement.