Network Services reports listening services and network-facing exposure from the AMTD estate.

---

Triage

1. Filter by service/port/protocol where available.
2. Identify management, file, database, remote-access and unknown services.
3. Compare exposure against host owner and network segment.
4. Prefer firewall hardening through Host Firewall audit → enforce.
5. Confirm the management channel remains available before enforcement.
6. Recheck the service after the change.

A listening service is not automatically a vulnerability. Risk depends on binding, authentication, exposure, patch state and who can reach it.