Kennav2

Use the Kenna v2 integration to search and update vulnerabilities, schedule a run connector, and manage tags and attributes.

Vulnerability Management · Kenna

Details

IDKennav2
ProviderCisco Systems
CategoryVulnerability Management
From Version5.0.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix XSIAM EDR Cortex Cloud Cloud Runtime Security

README

Use the Kenna v2 integration to search and update vulnerabilities, schedule a run connector, and manage tags and attributes.
This integration was integrated and tested with version 1.0 of Kenna.

Configure Kenna v2 on Cortex XSOAR

  1. Navigate to Settings > Integrations > Instances.
  2. Search for Kenna v2.

  3. Click Add instance to create and configure a new integration instance.

    Parameter Required
    Server URL (e.g. https://api.kennasecurity.com) False
    Kenna API key False
    Use system proxy settings False
    Trust any certificate (not secure) False
  4. Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

kenna-search-vulnerabilities

Searches for vulnerabilities in Kenna.

Base Command

kenna-search-vulnerabilities

Input

Argument Name Description Required
id The vulnerability ID for which to search. Optional
top-priority Whether to return vulnerabilities that Kenna deems a top priority to fix. Possible values are: true, false. Optional
min-score The minimum vulnerability score for which to return vulnerabilities. Optional
status The status of the vulnerability. Possible values are: open, closed, risk_accepted, false_positive. Optional
limit The maximum number of vulnerabilities to return. Default is 500. Optional
to_context Whether to flush to context. Possible values are: True, False. Default is True. Optional

Context Output

Path Type Description
Kenna.Vulnerabilities.AssetID Number The asset ID related to the vulnerability.
Kenna.Vulnerabilities.Connectors.DefinitionName String The connector definition name related to the vulnerability.
Kenna.Vulnerabilities.Connectors.ID Number The connector ID related to the vulnerability.
Kenna.Vulnerabilities.Connectors.Name String The connector name related to the vulnerability.
Kenna.Vulnerabilities.Connectors.Vendor String The connector vendor related to the vulnerability.
Kenna.Vulnerabilities.CveID String The CVE ID related to the vulnerability.
Kenna.Vulnerabilities.FixID String The fix ID related to the vulnerability.
Kenna.Vulnerabilities.Patch Boolean Whether there is a patch related to the vulnerability.
Kenna.Vulnerabilities.ScannerVulnerabilities.ExternalID String The vulnerability scanner external ID.
Kenna.Vulnerabilities.ScannerVulnerabilities.Open Boolean Whether the vulnerability scanner is open.
Kenna.Vulnerabilities.ScannerVulnerabilities.Port Number The vulnerability scanner port.
Kenna.Vulnerabilities.Score Number The vulnerability score.
Kenna.Vulnerabilities.ServiceTicket.DueDate Date The service ticket due date.
Kenna.Vulnerabilities.ServiceTicket.ExternalIdentifier String The service ticket external identifier.
Kenna.Vulnerabilities.ServiceTicket.Status String The service ticket status.
Kenna.Vulnerabilities.ServiceTicket.TicketType String The service ticket type.
Kenna.Vulnerabilities.Severity Number The vulnerability severity.
Kenna.Vulnerabilities.Status String The vulnerability status.
Kenna.Vulnerabilities.Threat Number The vulnerability threat.
Kenna.Vulnerabilities.TopPriority Number The vulnerability priority.
Kenna.Vulnerabilities.ID Number The vulnerability ID.

Command example

!kenna-search-vulnerabilities id=dummy limit=1 to_context=True

Context Example

{
    "Kenna": {
        "Vulnerabilities": {
            "AssetID": "dummy",
            "Connectors": [
                {
                    "DefinitionName": "Dummy XML",
                    "ID": 0,
                    "Name": "Dummy XML",
                    "Vendor": "Dummy"
                },
                {
                    "DefinitionName": "Kenna Data",
                    "ID": 1,
                    "Name": "Generic",
                    "Vendor": "Dummy"
                }
            ],
            "CveID": "CVE-2015-0000",
            "FixID": 00000,
            "ID": 00000,
            "Patch": true,
            "ScannerVulnerabilities": [
                {
                    "ExternalID": "generic scanner-id CVE-2015-0000",
                    "Open": true,
                    "Port": null
                },
                {
                    "ExternalID": "dummy-external-id CVE-2015-0000 0000-0000-0000-0000-0000",
                    "Open": true,
                    "Port": null
                }
            ],
            "Score": 100,
            "Severity": 10,
            "Status": "open",
            "Threat": 10,
            "TopPriority": true
        }
    }
}

Human Readable Output

Kenna Vulnerabilities

Name Score id
CVE-2015-0000 100 00000

kenna-run-connector

Executes a run of the specified connector. If file based, it will use the most recently uploaded data file.

Base Command

kenna-run-connector

Input

Argument Name Description Required
id The connector ID to run. Required

Context Output

There is no context output for this command.

Command example

!kenna-run-connector id=dummy

Human Readable Output

Connector dummy ran successfully.

kenna-search-fixes

Filters fixes by a given set of vulnerability and asset parameters and returns the filtered fixes.

Base Command

kenna-search-fixes

Input

Argument Name Description Required
id The vulnerability ID for which to search. Optional
top-priority Whether to return vulnerabilities that Kenna deems a top priority to fix. Possible values are: true, false. Optional
min-score The minimum vulnerability score for which to return vulnerabilities. Optional
status The status of the vulnerability. Possible values are: open, closed, risk_accepted, false_positive. Optional
limit The maximum number of vulnerabilities to return. Default is 500. Optional
to_context Whether to flush to context. Possible values are: True, False. Default is True. Optional

Context Output

Path Type Description
Kenna.Fixes.ID Number The fix ID.
Kenna.Fixes.Title String The fix title.
Kenna.Fixes.Assets.ID Number The asset ID related to the current fix.
Kenna.Fixes.Assets.Locator String The asset locator related to the current fix.
Kenna.Fixes.Assets.PrimaryLocator String The asset primary locator related to the current fix.
Kenna.Fixes.Assets.DisplayLocator String The asset display locator related to the current fix.
Kenna.Fixes.Vulnerabilities.ID Number The vulnerability ID related to the current fix.
Kenna.Fixes.Vulnerabilities.ServiceTicketStatus String The vulnerability service ticket status related to the current fix.
Kenna.Fixes.Vulnerabilities.ScannerIDs Number The vulnerability scanner IDs related to the current fix.
Kenna.Fixes.CveID String The CVE-ID list related to the current fix.
Kenna.Fixes.LastUpdatedAt String The timestamp when the current fix was last updated.
Kenna.Fixes.Category String The category of fix.
Kenna.Fixes.VulnerabilityCount Number The vulnerability count of the fix.
Kenna.Fixes.MaxScore Number The maximum score of the fix.

Command example

!kenna-search-fixes limit=2 id=dummy to_context=True

Context Example

{
    "Kenna": {
        "Fixes": {
            "Assets": [
                {
                    "DisplayLocator": "0.0.0",
                    "ID": 0,
                    "Locator": "0.0.0",
                    "PrimaryLocator": "ip_address"
                }
            ],
            "Category": null,
            "CveID": [
                "CVE-2015-0000"
            ],
            "ID": 0,
            "LastUpdatedAt": "2019-10-24T19:13:29.000Z",
            "MaxScore": 100,
            "Title": "CVE-2015-0000",
            "VulnerabilityCount": 1
        }
    }
}

Human Readable Output

CVE-2015-0000

ID: 0

1 vulnerabilities affected

Diagnosis

Related CVE IDs: CVE-2015-0000
 

kenna-update-asset

Updates the attributes of a single asset.

Base Command

kenna-update-asset

Input

Argument Name Description Required
id The ID of the asset to update. Required
notes Notes about the asset. Required
inactive Whether to deactivate the asset. Possible values are: true, false. Optional

Context Output

There is no context output for this command.

Command example

!kenna-update-asset id=dummy notes="New asset info"

Human Readable Output

Asset with ID dummy was successfully updated.

kenna-update-vulnerability

Updates the attributes of a single vulnerability.

Base Command

kenna-update-vulnerability

Input

Argument Name Description Required
id The ID of the vulnerability to update. Required
status The status of the vulnerability. Possible values are: open, closed, risk_accepted, false_positive. Optional
notes Notes about the vulnerability. Optional

Context Output

There is no context output for this command.

Command example

!kenna-update-vulnerability id=dummy status=open notes="Test"

Human Readable Output

Asset dummy was updated

kenna-get-connectors

Returns all connectors.

Base Command

kenna-get-connectors

Input

There are no input arguments for this command.

Context Output

Path Type Description
Kenna.ConnectorsList.ID Number The connector ID.
Kenna.ConnectorsList.Name String The connector name.
Kenna.ConnectorsList.Running Boolean The running connector.
Kenna.ConnectorsList.Host String The connector host.

Command example


#### Context Example

```json
{
    "Kenna": {
        "ConnectorsList": [
            {
                "Host": null,
                "ID": 0,
                "Name": "XML",
                "Running": false
            },
            {
                "Host": null,
                "ID": 1,
                "Name": "Generic",
                "Running": false
            }
        ]
    }
}

Human Readable Output

Kenna Connectors

Host ID Name Running
  0 XML false
  1 Generic false

kenna-search-assets

Searches for assets.

Base Command

kenna-search-assets

Input

Argument Name Description Required
id The asset ID to search for. Optional
hostname The hostname of the asset to search for. Optional
min-score The minimum vulnerability score for which to return vulnerabilities. Optional
tags The tags by which to search. Optional
limit The maximum number of vulnerabilities to return. Default is 500. Optional
to_context Whether to print output to context. Possible values are: True, False. Default is True. Optional

Context Output

Path Type Description
Kenna.Assets.ID Number The asset ID.
Kenna.Assets.ExternalID String The asset external ID.
Kenna.Assets.Hostname String The hostname of the asset.
Kenna.Assets.IpAddress String The asset IP address.
Kenna.Assets.Score Number The asset risk score.
Kenna.Assets.VulnerabilitiesCount Number The number of vulnerabilities associated with the asset.
Kenna.Assets.OperatingSystem String The asset operating system.
Kenna.Assets.Tags String A list of the asset’s tags.
Kenna.Assets.Fqdn String The asset FQDN.
Kenna.Assets.Status String The asset status.
Kenna.Assets.Owner String The asset owner.
Kenna.Assets.Priority Number The asset priority.
Kenna.Assets.Notes String Notes of current asset.
Kenna.Assets.OperatingSystem String Operating system of the asset.

Command example

!kenna-search-assets limit=2 to_context=True

Context Example

{
    "Kenna": {
        "Assets": [
            {
                "Fqdn": null,
                "Hostname": null,
                "ID": 0,
                "IpAddress": "0.0.0",
                "Notes": "New asset info",
                "OperatingSystem": "Windows",
                "Owner": null,
                "Priority": 10,
                "Score": 1000,
                "Status": "active",
                "Tags": [
                    "Dummy"
                ],
                "VulnerabilitiesCount": 10
            },
            {
                "Fqdn": null,
                "Hostname": null,
                "ID": 1,
                "IpAddress": "0.0.0",
                "Notes": null,
                "OperatingSystem": "Windows",
                "Owner": null,
                "Priority": 10,
                "Score": 1000,
                "Status": "active",
                "Tags": [
                    "Category"
                ],
                "VulnerabilitiesCount": 10
            }
        ]
    }
}

Human Readable Output

Kenna Assets

IP-address Operating System Score id
0.0.0 Windows 1000 0
0.0.0 Windows 1000 1

kenna-get-asset-vulnerabilities

Gets vulnerabilities of the specified asset.

Base Command

kenna-get-asset-vulnerabilities

Input

Argument Name Description Required
id The asset ID for which to get vulnerabilities. Required
limit The maximum number of vulnerabilities to return. Default is 500. Optional
to_context Whether to print output to context. Possible values are: True, False. Default is True. Optional

Context Output

Path Type Description
Kenna.VulnerabilitiesOfAsset.AssetID Number The ID of the asset that this vulnerability is associated with.
Kenna.VulnerabilitiesOfAsset.CveID String The CVE ID of the vulnerability associated with the asset.
Kenna.VulnerabilitiesOfAsset.ID Number The ID of the vulnerability associated withe the asset.
Kenna.VulnerabilitiesOfAsset.Patch Boolean Whether there is a patch for the vulnerability associated with the asset.
Kenna.VulnerabilitiesOfAsset.Status String The status of the vulnerability associated with the asset.
Kenna.VulnerabilitiesOfAsset.TopPriority Boolean Whether the vulnerability associated with the asset is a top priority.
Kenna.VulnerabilitiesOfAsset.Score Number The score of the vulnerability associated with the asset.

Command example

!kenna-get-asset-vulnerabilities id=dummy limit=2 to_context=True

Context Example

{
    "Kenna": {
        "VulnerabilitiesOfAsset": [
            {
                "AssetID": "dummy",
                "CveID": "CVE-2015-0000",
                "ID": 0,
                "Patch": true,
                "Score": 100,
                "Status": "open",
                "TopPriority": true
            },
            {
                "AssetID": "dummy",
                "CveID": "CVE-2015-0001",
                "ID": 1,
                "Patch": true,
                "Score": 100,
                "Status": "open",
                "TopPriority": true
            }
        ]
    }
}

Human Readable Output

Kenna Vulnerabilities

Name Score id
CVE-2015-0000 100 0
CVE-2015-0001 100 1

kenna-add-tag

Adds a tag to the specified asset.

Base Command

kenna-add-tag

Input

Argument Name Description Required
tag A comma-separated list of tags to add to the asset. Required
id The asset ID to which to add the tag. Required

Context Output

There is no context output for this command.

Command example

!kenna-add-tag tag="Test tag" id=dummy

Human Readable Output

Tag Test tag was added to asset dummy

kenna-delete-tag

Deletes tags from the specified asset.

Base Command

kenna-delete-tag

Input

Argument Name Description Required
id The asset ID from which to delete the tag. Required
tag The tag to delete. Required

Context Output

There is no context output for this command.

Command example

!kenna-delete-tag id=dummy tag="Test tag"

Human Readable Output

Tag Test tag was successfully removed from asset.

kenna-get-connector-runs

Returns JSON data on all the runs of a given connector.

Base Command

kenna-get-connector-runs

Input

Argument Name Description Required
connector_id Unique numerical ID of the connector. Required

Context Output

Path Type Description
Kenna.ConnectorRunsList.ID Number Connector Run ID.
Kenna.ConnectorRunsList.StartTime Number Connector Run Start Time.
Kenna.ConnectorRunsList.EndTime string Connector Run End Time.
Kenna.ConnectorRunsList.Success boolean Boolean value showing connector success.
Kenna.ConnectorRunsList.TotalPayload Number Total connector payloads.
Kenna.ConnectorRunsList.ProcessedPayload Number Total payloads processed the connector.
Kenna.ConnectorRunsList.FailedPayload Number Total failed payloads.
Kenna.ConnectorRunsList.ProcessedAssets Number Amount of processed assets.
Kenna.ConnectorRunsList.AssetsWithTagsReset Number Amount of assets with reset tags.
Kenna.ConnectorRunsList.ProcessedScannerVulnerabilities Number Amount of processed scanners with vulnerabilities.
Kenna.ConnectorRunsList.UpdatedScannerVulnerabilities Number Amount of updated scanners with vulnerabilities.
Kenna.ConnectorRunsList.CreatedScannerVulnerabilities Number Amount of created scanners with vulnerabilities.
Kenna.ConnectorRunsList.ClosedScannerVulnerabilities Number Amount of closed scanners with vulnerabilities.
Kenna.ConnectorRunsList.AutoclosedScannerVulnerabilities Number Amount of auto-closed scanners with vulnerabilities.
Kenna.ConnectorRunsList.ReopenedScannerVulnerabilities number Amount of reopened scanners with vulnerabilities.
Kenna.ConnectorRunsList.ClosedVulnerabilities Number Amount of closed vulnerabilities.
Kenna.ConnectorRunsList.AutoclosedVulnerabilities Number Amount of auto-closed vulnerabilities.
Kenna.ConnectorRunsList.ReopenedVulnerabilities Number Amount of re-opened vulnerabilities.

Command example

!kenna-get-connector-runs connector_id=dummy

Context Example

{
    "Kenna": {
        "ConnectorRunsList": {
            "AssetsWithTagsReset": 0,
            "AutoclosedScannerVulnerabilities": 0,
            "AutoclosedVulnerabilities": 0,
            "ClosedScannerVulnerabilities": 0,
            "ClosedVulnerabilities": 0,
            "CreatedScannerVulnerabilities": 0,
            "EndTime": "2019-10-24T19:13:36.000Z",
            "FailedPayload": 0,
            "ID": 0,
            "ProcessedAssets": 0,
            "ProcessedPayload": null,
            "ProcessedScannerVulnerabilities": 0,
            "ReopenedScannerVulnerabilities": 0,
            "ReopenedVulnerabilities": 0,
            "StartTime": "2019-10-24T19:02:02.000Z",
            "Success": true,
            "TotalPayload": 0,
            "UpdatedScannerVulnerabilities": 0
        }
    }
}

Human Readable Output

Kenna Connector Runs

AssetsWithTagsReset AutoclosedScannerVulnerabilities AutoclosedVulnerabilities ClosedScannerVulnerabilities ClosedVulnerabilities CreatedScannerVulnerabilities EndTime FailedPayload ID ProcessedAssets ProcessedPayload ProcessedScannerVulnerabilities ReopenedScannerVulnerabilities ReopenedVulnerabilities StartTime Success TotalPayload UpdatedScannerVulnerabilities
0 0 0 0 0 0 2019-10-24T19:13:36.000Z 0 0 0 0 0 0 0 2019-10-24T19:02:02.000Z true 0 0

kenna-search-assets-by-external-id

Search assets by external ID.

Base Command

kenna-search-assets-by-external-id

Input

Argument Name Description Required
external_id The external ID of the asset. Required
to_context Whether to put data in context. Possible values are: true, false. Optional
limit The maximum number of assets to return. Default is 500. Optional

Context Output

Path Type Description
Kenna.Assets.ID Number The asset ID.
Kenna.Assets.Notes String Notes of current asset.
Kenna.Assets.VulnerabilitiesCount Number Count of vulnerabilities of current asset.
Kenna.Assets.Hostname String Hostname of current asset.
Kenna.Assets.Score Number Score of current asset.
Kenna.Assets.IpAddress String IP of current asset.
Kenna.Assets.OperatingSystem String Operating system of current asset.

Command example

!kenna-search-assets-by-external-id external_id=dummy limit=2 to_context=true

Context Example

{
    "Kenna": {
        "Assets": [
            {
                "Fqdn": null,
                "Hostname": null,
                "ID": 0,
                "IpAddress": "0.0.0",
                "Notes": "New asset info",
                "OperatingSystem": "Windows",
                "Owner": null,
                "Priority": 10,
                "Score": 1000,
                "Status": "active",
                "Tags": [
                    "Category10",
                    "Category9"
                ],
                "VulnerabilitiesCount": 10
            },
            {
                "Fqdn": null,
                "Hostname": null,
                "ID": 1,
                "IpAddress": "0.0.0",
                "Notes": null,
                "OperatingSystem": "Windows",
                "Owner": null,
                "Priority": 10,
                "Score": 1000,
                "Status": "active",
                "Tags": [
                    "Category5",
                    "Category7"
                ],
                "VulnerabilitiesCount": 10
            }
        ]
    }
}

Human Readable Output

Kenna Assets

IP-address Operating System Score id
0.0.0 Windows 1000 0
0.0.0 Windows 1000 0

Configuration parameters

  • url — Server URL (e.g. https://api.kennasecurity.com)
  • key — Kenna API key
  • credentials_key —
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (12)

  • kenna-add-tag

    Adds a tag to the specified asset.

  • kenna-delete-tag

    Deletes tags from the specified asset.

  • kenna-get-asset-vulnerabilities

    Gets vulnerabilities of the specified asset.

  • kenna-get-connector-runs

    Returns JSON data on all the runs of a given connector.

  • kenna-get-connectors

    Returns all connectors.

  • kenna-run-connector

    Executes a run of the specified connector. If file based, it will use the most recently uploaded data file.

  • kenna-search-assets

    Searches for assets.

  • kenna-search-assets-by-external-id

    Search assets by external ID.

  • kenna-search-fixes

    Filters fixes by a given set of vulnerability and asset parameters and returns the filtered fixes.

  • kenna-search-vulnerabilities

    Searches for vulnerabilities in Kenna.

  • kenna-update-asset

    Updates the attributes of a single asset.

  • kenna-update-vulnerability

    Updates the attributes of a single vulnerability.

Source

KennaV2.py KennaV2_test.py KennaV2.yml KennaV2_description.md command_examples.txt
Download History Raw 
category: Vulnerability Management
provider: Cisco Systems
commonfields:
  id: Kennav2
  version: -1
configuration:
- defaultvalue: https://api.kennasecurity.com
  display: Server URL (e.g.  https://api.kennasecurity.com)
  name: url
  type: 0
  required: false
- display: Kenna API key
  name: key
  type: 4
  hidden: true
  required: false
- displaypassword: Kenna API key
  name: credentials_key
  hiddenusername: true
  type: 9
  required: false
- defaultvalue: 'false'
  display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- defaultvalue: 'false'
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
description: Use the Kenna v2 integration to search and update vulnerabilities, schedule a run connector, and manage tags and attributes.
display: Kenna v2
name: Kennav2
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      description: Whether to return vulnerabilities that Kenna deems a top priority to fix.
      isArray: true
      name: top-priority
      predefined:
      - 'true'
      - 'false'
    - description: The minimum vulnerability score for which to return vulnerabilities.
      name: min-score
    - auto: PREDEFINED
      description: The status of the vulnerability.
      isArray: true
      name: status
      predefined:
      - open
      - closed
      - risk_accepted
      - false_positive
    - defaultValue: '500'
      description: The maximum number of vulnerabilities to return.
      name: limit
    - auto: PREDEFINED
      default: true
      defaultValue: 'True'
      description: Whether to flush to context.
      name: to_context
      predefined:
      - 'True'
      - 'False'
    - description: The vulnerability ID for which to search.
      isArray: true
      name: id
    description: Searches for vulnerabilities in Kenna.
    name: kenna-search-vulnerabilities
    outputs:
    - contextPath: Kenna.Vulnerabilities.AssetID
      description: The asset ID related to the vulnerability.
      type: Number
    - contextPath: Kenna.Vulnerabilities.Connectors.DefinitionName
      description: The connector definition name related to the vulnerability.
      type: String
    - contextPath: Kenna.Vulnerabilities.Connectors.ID
      description: The connector ID related to the vulnerability.
      type: Number
    - contextPath: Kenna.Vulnerabilities.Connectors.Name
      description: The connector name related to the vulnerability.
      type: String
    - contextPath: Kenna.Vulnerabilities.Connectors.Vendor
      description: The connector vendor related to the vulnerability.
      type: String
    - contextPath: Kenna.Vulnerabilities.CveID
      description: The CVE ID related to the vulnerability.
      type: String
    - contextPath: Kenna.Vulnerabilities.FixID
      description: The fix ID related to the vulnerability.
      type: String
    - contextPath: Kenna.Vulnerabilities.Patch
      description: Whether there is a patch related to the vulnerability.
      type: Boolean
    - contextPath: Kenna.Vulnerabilities.ScannerVulnerabilities.ExternalID
      description: The vulnerability scanner external ID.
      type: String
    - contextPath: Kenna.Vulnerabilities.ScannerVulnerabilities.Open
      description: Whether the vulnerability scanner is open.
      type: Boolean
    - contextPath: Kenna.Vulnerabilities.ScannerVulnerabilities.Port
      description: The vulnerability scanner port.
      type: Number
    - contextPath: Kenna.Vulnerabilities.Score
      description: The vulnerability score.
      type: Number
    - contextPath: Kenna.Vulnerabilities.ServiceTicket.DueDate
      description: The service ticket due date.
      type: Date
    - contextPath: Kenna.Vulnerabilities.ServiceTicket.ExternalIdentifier
      description: The service ticket external identifier.
      type: String
    - contextPath: Kenna.Vulnerabilities.ServiceTicket.Status
      description: The service ticket status.
      type: String
    - contextPath: Kenna.Vulnerabilities.ServiceTicket.TicketType
      description: The service ticket type.
      type: String
    - contextPath: Kenna.Vulnerabilities.Severity
      description: The vulnerability severity.
      type: Number
    - contextPath: Kenna.Vulnerabilities.Status
      description: The vulnerability status.
      type: String
    - contextPath: Kenna.Vulnerabilities.Threat
      description: The vulnerability threat.
      type: Number
    - contextPath: Kenna.Vulnerabilities.TopPriority
      description: The vulnerability priority.
      type: Number
    - contextPath: Kenna.Vulnerabilities.ID
      description: The vulnerability ID.
      type: Number
  - arguments:
    - description: The connector ID to run.
      name: id
      required: true
    description: Executes a run of the specified connector. If file based, it will use the most recently uploaded data file.
    execution: true
    name: kenna-run-connector
  - arguments:
    - description: The vulnerability ID for which to search.
      isArray: true
      name: id
    - auto: PREDEFINED
      description: Whether to return vulnerabilities that Kenna deems a top priority to fix.
      isArray: true
      name: top-priority
      predefined:
      - 'true'
      - 'false'
    - description: The minimum vulnerability score for which to return vulnerabilities.
      name: min-score
    - auto: PREDEFINED
      description: The status of the vulnerability.
      isArray: true
      name: status
      predefined:
      - open
      - closed
      - risk_accepted
      - false_positive
    - defaultValue: '500'
      description: The maximum number of vulnerabilities to return.
      name: limit
    - auto: PREDEFINED
      defaultValue: 'True'
      description: Whether to flush to context.
      name: to_context
      predefined:
      - 'True'
      - 'False'
    description: Filters fixes by a given set of vulnerability and asset parameters and returns the filtered fixes.
    name: kenna-search-fixes
    outputs:
    - contextPath: Kenna.Fixes.ID
      description: The fix ID.
      type: Number
    - contextPath: Kenna.Fixes.Title
      description: The fix title.
      type: String
    - contextPath: Kenna.Fixes.Assets.ID
      description: The asset ID related to the current fix.
      type: Number
    - contextPath: Kenna.Fixes.Assets.Locator
      description: The asset locator related to the current fix.
      type: String
    - contextPath: Kenna.Fixes.Assets.PrimaryLocator
      description: The asset primary locator related to the current fix.
      type: String
    - contextPath: Kenna.Fixes.Assets.DisplayLocator
      description: The asset display locator related to the current fix.
      type: String
    - contextPath: Kenna.Fixes.Vulnerabilities.ID
      description: The vulnerability ID related to the current fix.
      type: Number
    - contextPath: Kenna.Fixes.Vulnerabilities.ServiceTicketStatus
      description: The vulnerability service ticket status related to the current fix.
      type: String
    - contextPath: Kenna.Fixes.Vulnerabilities.ScannerIDs
      description: The vulnerability scanner IDs related to the current fix.
      type: Number
    - contextPath: Kenna.Fixes.CveID
      description: The CVE-ID list related to the current fix.
      type: String
    - contextPath: Kenna.Fixes.LastUpdatedAt
      description: The timestamp when the current fix was last updated.
      type: String
    - contextPath: Kenna.Fixes.Category
      description: The category of fix.
      type: String
    - contextPath: Kenna.Fixes.VulnerabilityCount
      description: The vulnerability count of the fix.
      type: Number
    - contextPath: Kenna.Fixes.MaxScore
      description: The maximum score of the fix.
      type: Number
  - arguments:
    - description: The ID of the asset to update.
      name: id
      required: true
    - description: Notes about the asset.
      name: notes
      required: true
    - auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      name: inactive
      description: Whether to deactivate the asset.
    description: Updates the attributes of a single asset.
    name: kenna-update-asset
  - arguments:
    - description: The ID of the vulnerability to update.
      name: id
      required: true
    - auto: PREDEFINED
      description: The status of the vulnerability.
      name: status
      predefined:
      - open
      - closed
      - risk_accepted
      - false_positive
    - description: Notes about the vulnerability.
      name: notes
    description: Updates the attributes of a single vulnerability.
    name: kenna-update-vulnerability
  - description: Returns all connectors.
    name: kenna-get-connectors
    outputs:
    - contextPath: Kenna.ConnectorsList.ID
      description: The connector ID.
      type: Number
    - contextPath: Kenna.ConnectorsList.Name
      description: The connector name.
      type: String
    - contextPath: Kenna.ConnectorsList.Running
      description: The running connector.
      type: Boolean
    - contextPath: Kenna.ConnectorsList.Host
      description: The connector host.
      type: String
  - arguments:
    - description: The asset ID to search for.
      isArray: true
      name: id
    - description: The hostname of the asset to search for.
      isArray: true
      name: hostname
    - description: The minimum vulnerability score for which to return vulnerabilities.
      name: min-score
    - description: The tags by which to search.
      isArray: true
      name: tags
    - defaultValue: '500'
      description: The maximum number of vulnerabilities to return.
      name: limit
    - auto: PREDEFINED
      defaultValue: 'True'
      description: Whether to print output to context.
      name: to_context
      predefined:
      - 'True'
      - 'False'
    description: Searches for assets.
    name: kenna-search-assets
    outputs:
    - contextPath: Kenna.Assets.ID
      description: The asset ID.
      type: Number
    - contextPath: Kenna.Assets.ExternalID
      description: The asset external ID.
      type: String
    - contextPath: Kenna.Assets.Hostname
      description: The hostname of the asset.
      type: String
    - contextPath: Kenna.Assets.IpAddress
      description: The asset IP address.
      type: String
    - contextPath: Kenna.Assets.Score
      description: The asset risk score.
      type: Number
    - contextPath: Kenna.Assets.VulnerabilitiesCount
      description: The number of vulnerabilities associated with the asset.
      type: Number
    - contextPath: Kenna.Assets.OperatingSystem
      description: The asset operating system.
      type: String
    - contextPath: Kenna.Assets.Tags
      description: A list of the asset's tags.
      type: String
    - contextPath: Kenna.Assets.Fqdn
      description: The asset FQDN.
      type: String
    - contextPath: Kenna.Assets.Status
      description: The asset status.
      type: String
    - contextPath: Kenna.Assets.Owner
      description: The asset owner.
      type: String
    - contextPath: Kenna.Assets.Priority
      description: The asset priority.
      type: Number
    - contextPath: Kenna.Assets.Notes
      description: Notes of current asset.
      type: String
    - contextPath: Kenna.Assets.OperatingSystem
      description: Operating system of the asset.
      type: String
  - arguments:
    - description: The asset ID for which to get vulnerabilities.
      isArray: true
      name: id
      required: true
    - defaultValue: '500'
      description: The maximum number of vulnerabilities to return.
      name: limit
    - auto: PREDEFINED
      defaultValue: 'True'
      description: Whether to print output to context.
      name: to_context
      predefined:
      - 'True'
      - 'False'
    description: Gets vulnerabilities of the specified asset.
    name: kenna-get-asset-vulnerabilities
    outputs:
    - contextPath: Kenna.VulnerabilitiesOfAsset.AssetID
      description: The ID of the asset that this vulnerability is associated with.
      type: Number
    - contextPath: Kenna.VulnerabilitiesOfAsset.CveID
      description: The CVE ID of the vulnerability associated with the asset.
      type: String
    - contextPath: Kenna.VulnerabilitiesOfAsset.ID
      description: The ID of the vulnerability associated withe the asset.
      type: Number
    - contextPath: Kenna.VulnerabilitiesOfAsset.Patch
      description: Whether there is a patch for the vulnerability associated with the asset.
      type: Boolean
    - contextPath: Kenna.VulnerabilitiesOfAsset.Status
      description: The status of the vulnerability associated with the asset.
      type: String
    - contextPath: Kenna.VulnerabilitiesOfAsset.TopPriority
      description: Whether the vulnerability associated with the asset is a top priority.
      type: Boolean
    - contextPath: Kenna.VulnerabilitiesOfAsset.Score
      description: The score of the vulnerability associated with the asset.
      type: Number
  - arguments:
    - description: A comma-separated list of tags to add to the asset.
      isArray: true
      name: tag
      required: true
    - description: The asset ID to which to add the tag.
      name: id
      required: true
    description: Adds a tag to the specified asset.
    name: kenna-add-tag
  - arguments:
    - description: The asset ID from which to delete the tag.
      name: id
      required: true
    - description: The tag to delete.
      name: tag
      required: true
    description: Deletes tags from the specified asset.
    name: kenna-delete-tag
  - arguments:
    - description: Unique numerical ID of the connector.
      name: connector_id
      required: true
    description: Returns JSON data on all the runs of a given connector.
    name: kenna-get-connector-runs
    outputs:
    - contextPath: Kenna.ConnectorRunsList.ID
      description: Connector Run ID.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.StartTime
      description: Connector Run Start Time.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.EndTime
      description: Connector Run End Time.
      type: string
    - contextPath: Kenna.ConnectorRunsList.Success
      description: Boolean value showing connector success.
      type: boolean
    - contextPath: Kenna.ConnectorRunsList.TotalPayload
      description: Total connector payloads.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.ProcessedPayload
      description: Total payloads processed the connector.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.FailedPayload
      description: Total failed payloads.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.ProcessedAssets
      description: Amount of processed assets.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.AssetsWithTagsReset
      description: Amount of assets with reset tags.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.ProcessedScannerVulnerabilities
      description: Amount of processed scanners with vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.UpdatedScannerVulnerabilities
      description: Amount of updated scanners with vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.CreatedScannerVulnerabilities
      description: Amount of created scanners with vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.ClosedScannerVulnerabilities
      description: Amount of closed scanners with vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.AutoclosedScannerVulnerabilities
      description: Amount of auto-closed scanners with vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.ReopenedScannerVulnerabilities
      description: Amount of reopened scanners with vulnerabilities.
      type: number
    - contextPath: Kenna.ConnectorRunsList.ClosedVulnerabilities
      description: Amount of closed vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.AutoclosedVulnerabilities
      description: Amount of auto-closed vulnerabilities.
      type: Number
    - contextPath: Kenna.ConnectorRunsList.ReopenedVulnerabilities
      description: Amount of re-opened vulnerabilities.
      type: Number
  - name: kenna-search-assets-by-external-id
    arguments:
    - name: external_id
      required: true
      description: The external ID of the asset.
    - name: to_context
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Whether to put data in context.
      defaultValue: "false"
    - name: limit
      description: The maximum number of assets to return.
      defaultValue: "500"
    outputs:
    - contextPath: Kenna.Assets.ID
      description: The asset ID.
      type: Number
    - contextPath: Kenna.Assets.Notes
      description: Notes of current asset.
      type: String
    - contextPath: Kenna.Assets.VulnerabilitiesCount
      description: Count of vulnerabilities of current asset.
      type: Number
    - contextPath: Kenna.Assets.Hostname
      description: Hostname of current asset.
      type: String
    - contextPath: Kenna.Assets.Score
      description: Score of current asset.
      type: Number
    - contextPath: Kenna.Assets.IpAddress
      description: IP of current asset.
      type: String
    - contextPath: Kenna.Assets.OperatingSystem
      description: Operating system of current asset.
      type: String
    description: Search assets by external ID.
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
tests:
- No tests (auto formatted)