Rapid7 InsightVM Cloud

InsightVM is a vulnerability management tool that can scan your network, eliminate vulnerabilities, and track and communicate its progress.

Vulnerability Management · Rapid7 InsightVM Cloud

Details

IDRapid7 InsightVM Cloud
ProviderRapid7
CategoryVulnerability Management
From Version6.0.0
Docker Imagedemisto/python3:3.12.8.3296088
Supported ModulesAgentix XSIAM

README

InsightVM is a Vulnerability Management Tool which Scan your Network, Eliminate Vulnerabilities, Track and Communicate progress.

Configure Rapid7 InsightVM Cloud in Cortex

Parameter Required
Username True
Password True
Trust any certificate (not secure) False
Server URL (e.g., https://example.net) True
Use system proxy settings False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

insightvm-cloud-get-asset


Returns the assessment and details of an asset (specified by id). Only assets which the caller has access to can be returned.

Base Command

insightvm-cloud-get-asset

Input

Argument Name Description Required
asset_id The identifier of the asset to retrieve the details for. Required

Context Output

There is no context output for this command.

insightvm-cloud-get-scan


Retrieves the scan with the specified identifier.

Base Command

insightvm-cloud-get-scan

Input

Argument Name Description Required
scan_id The identifier of the scan. Required

Context Output

There is no context output for this command.

insightvm-cloud-get-scan-engines


Retrieves a page of scan engines.

Base Command

insightvm-cloud-get-scan-engines

Input

Argument Name Description Required
page The index of the page to retrieve. Default is 0. Optional
size The number of records per page to retrieve. Default is 10. Optional

Context Output

There is no context output for this command.

insightvm-cloud-get-health-check


Returns an indicator of the health of the API.

Base Command

insightvm-cloud-get-health-check

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

There is no context output for this command.

insightvm-cloud-search-assets


Returns the inventory, assessment, and summary details for a page of assets.

Base Command

insightvm-cloud-search-assets

Input

Argument Name Description Required
hostname Search criteria for filtering assets returned. Required
page The index of the page (zero-based) to retrieve. Default is 0. Optional
size The number of records per page to retrieve. Default is 10. Optional

Context Output

There is no context output for this command.

insightvm-cloud-last-sites


Returns the details for sites

Base Command

insightvm-cloud-last-sites

Input

Argument Name Description Required
page The index of the page (zero-based) to retrieve. Default is 0. Optional
size The number of records per page to retrieve. Default is 10. Optional

Context Output

There is no context output for this command.

insightvm-cloud-search-vulnerabilities


Returns all vulnerabilities that can be assessed.

Base Command

insightvm-cloud-search-vulnerabilities

Input

Argument Name Description Required
page The index of the page to retrieve. Default is 0. Optional
size The number of records per page to retrieve. Default is 10. Optional
query query to search vulnerabilities. Required

Context Output

There is no context output for this command.

insightvm-cloud-start-scan


Starts a scan.

Base Command

insightvm-cloud-start-scan

Input

Argument Name Description Required
asset_id The identifiers of the assets to scan. Required
name The name of the scan. Optional

Context Output

There is no context output for this command.

insightvm-cloud-stop-scan


Stops the scan with the specified identifier.

Base Command

insightvm-cloud-stop-scan

Input

Argument Name Description Required
id The identifiers of the assets to stop scan. Required

Context Output

There is no context output for this command.

Configuration parameters

  • credentials — Username (required)
  • insecure — Trust any certificate (not secure)
  • base_url — Server URL (e.g., https://example.net) (required)
  • proxy — Use system proxy settings

Commands (9)

  • insightvm-cloud-get-asset

    Returns the assessment and details of an asset (specified by ID). Only assets that the caller has access to can be returned.

  • insightvm-cloud-get-health-check

    Returns an indicator of the health of the API.

  • insightvm-cloud-get-scan

    Retrieves the scan with the specified identifier.

  • insightvm-cloud-get-scan-engines

    Retrieves a page of scan engines.

  • insightvm-cloud-last-sites

    Returns the details for sites.

  • insightvm-cloud-search-assets

    Returns the inventory, assessment, and summary details for a page of assets.

  • insightvm-cloud-search-vulnerabilities

    Returns all vulnerabilities that can be accessed.

  • insightvm-cloud-start-scan

    Starts a scan.

  • insightvm-cloud-stop-scan

    Stops the scan with the specified identifier.

category: Vulnerability Management
provider: Rapid7
commonfields:
  id: Rapid7 InsightVM Cloud
  version: -1
configuration:
- display: Username
  name: credentials
  required: true
  type: 9
- defaultvalue: 'false'
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- defaultvalue: https://us.api.insight.rapid7.com/vm
  display: Server URL (e.g., https://example.net)
  name: base_url
  required: true
  type: 0
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: InsightVM is a vulnerability management tool that can scan your network, eliminate vulnerabilities, and track and communicate its progress.
display: Rapid7 InsightVM Cloud
name: Rapid7 InsightVM Cloud
script:
  commands:
  - arguments:
    - description: The identifier of the asset to retrieve the details for.
      name: asset_id
      required: true
    description: Returns the assessment and details of an asset (specified by ID). Only assets that the caller has access to can be returned.
    name: insightvm-cloud-get-asset
  - arguments:
    - description: The identifier of the scan.
      name: scan_id
      required: true
    description: Retrieves the scan with the specified identifier.
    name: insightvm-cloud-get-scan
  - arguments:
    - defaultValue: '0'
      description: The index of the page to retrieve.
      name: page
    - defaultValue: '10'
      description: The number of records per page to retrieve.
      name: size
    description: Retrieves a page of scan engines.
    name: insightvm-cloud-get-scan-engines
  - arguments: []
    description: Returns an indicator of the health of the API.
    name: insightvm-cloud-get-health-check
  - arguments:
    - description: Search criteria for filtering assets returned.
      name: hostname
      required: true
    - defaultValue: '0'
      description: The index of the page (zero-based) to retrieve.
      name: page
    - defaultValue: '10'
      description: The number of records per page to retrieve.
      name: size
    description: Returns the inventory, assessment, and summary details for a page of assets.
    name: insightvm-cloud-search-assets
  - arguments:
    - defaultValue: '0'
      description: The index of the page (zero-based) to retrieve.
      name: page
    - defaultValue: '10'
      description: The number of records per page to retrieve.
      name: size
    description: Returns the details for sites.
    name: insightvm-cloud-last-sites
  - arguments:
    - defaultValue: '0'
      description: The index of the page to retrieve.
      name: page
    - defaultValue: '10'
      description: The number of records per page to retrieve.
      name: size
    - description: Query by which to search for vulnerabilities.
      name: query
      required: true
    description: Returns all vulnerabilities that can be accessed.
    name: insightvm-cloud-search-vulnerabilities
  - arguments:
    - description: A comma-separated list of asset IDs to scan.
      name: asset_id
      required: true
    - description: The name of the scan.
      name: name
    description: Starts a scan.
    name: insightvm-cloud-start-scan
  - arguments:
    - description: The identifier of the asset used to stop the scan.
      name: id
      required: true
    description: Stops the scan with the specified identifier.
    name: insightvm-cloud-stop-scan
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)