Rapid7 InsightVM Cloud
InsightVM is a vulnerability management tool that can scan your network, eliminate vulnerabilities, and track and communicate its progress.
Vulnerability Management · Rapid7 InsightVM Cloud
Details
| ID | Rapid7 InsightVM Cloud |
|---|---|
| Provider | Rapid7 |
| Category | Vulnerability Management |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.8.3296088 |
| Supported Modules | Agentix XSIAM |
README
InsightVM is a Vulnerability Management Tool which Scan your Network, Eliminate Vulnerabilities, Track and Communicate progress.
Configure Rapid7 InsightVM Cloud in Cortex
| Parameter | Required |
|---|---|
| Username | True |
| Password | True |
| Trust any certificate (not secure) | False |
| Server URL (e.g., https://example.net) | True |
| Use system proxy settings | False |
Commands
You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.
insightvm-cloud-get-asset
Returns the assessment and details of an asset (specified by id). Only assets which the caller has access to can be returned.
Base Command
insightvm-cloud-get-asset
Input
| Argument Name | Description | Required |
|---|---|---|
| asset_id | The identifier of the asset to retrieve the details for. | Required |
Context Output
There is no context output for this command.
insightvm-cloud-get-scan
Retrieves the scan with the specified identifier.
Base Command
insightvm-cloud-get-scan
Input
| Argument Name | Description | Required |
|---|---|---|
| scan_id | The identifier of the scan. | Required |
Context Output
There is no context output for this command.
insightvm-cloud-get-scan-engines
Retrieves a page of scan engines.
Base Command
insightvm-cloud-get-scan-engines
Input
| Argument Name | Description | Required |
|---|---|---|
| page | The index of the page to retrieve. Default is 0. | Optional |
| size | The number of records per page to retrieve. Default is 10. | Optional |
Context Output
There is no context output for this command.
insightvm-cloud-get-health-check
Returns an indicator of the health of the API.
Base Command
insightvm-cloud-get-health-check
Input
| Argument Name | Description | Required |
| — | — | — |
Context Output
There is no context output for this command.
insightvm-cloud-search-assets
Returns the inventory, assessment, and summary details for a page of assets.
Base Command
insightvm-cloud-search-assets
Input
| Argument Name | Description | Required |
|---|---|---|
| hostname | Search criteria for filtering assets returned. | Required |
| page | The index of the page (zero-based) to retrieve. Default is 0. | Optional |
| size | The number of records per page to retrieve. Default is 10. | Optional |
Context Output
There is no context output for this command.
insightvm-cloud-last-sites
Returns the details for sites
Base Command
insightvm-cloud-last-sites
Input
| Argument Name | Description | Required |
|---|---|---|
| page | The index of the page (zero-based) to retrieve. Default is 0. | Optional |
| size | The number of records per page to retrieve. Default is 10. | Optional |
Context Output
There is no context output for this command.
insightvm-cloud-search-vulnerabilities
Returns all vulnerabilities that can be assessed.
Base Command
insightvm-cloud-search-vulnerabilities
Input
| Argument Name | Description | Required |
|---|---|---|
| page | The index of the page to retrieve. Default is 0. | Optional |
| size | The number of records per page to retrieve. Default is 10. | Optional |
| query | query to search vulnerabilities. | Required |
Context Output
There is no context output for this command.
insightvm-cloud-start-scan
Starts a scan.
Base Command
insightvm-cloud-start-scan
Input
| Argument Name | Description | Required |
|---|---|---|
| asset_id | The identifiers of the assets to scan. | Required |
| name | The name of the scan. | Optional |
Context Output
There is no context output for this command.
insightvm-cloud-stop-scan
Stops the scan with the specified identifier.
Base Command
insightvm-cloud-stop-scan
Input
| Argument Name | Description | Required |
|---|---|---|
| id | The identifiers of the assets to stop scan. | Required |
Context Output
There is no context output for this command.
Configuration parameters
credentials— Username (required)insecure— Trust any certificate (not secure)base_url— Server URL (e.g., https://example.net) (required)proxy— Use system proxy settings
Commands (9)
-
insightvm-cloud-get-assetReturns the assessment and details of an asset (specified by ID). Only assets that the caller has access to can be returned.
-
insightvm-cloud-get-health-checkReturns an indicator of the health of the API.
-
insightvm-cloud-get-scanRetrieves the scan with the specified identifier.
-
insightvm-cloud-get-scan-enginesRetrieves a page of scan engines.
-
insightvm-cloud-last-sitesReturns the details for sites.
-
insightvm-cloud-search-assetsReturns the inventory, assessment, and summary details for a page of assets.
-
insightvm-cloud-search-vulnerabilitiesReturns all vulnerabilities that can be accessed.
-
insightvm-cloud-start-scanStarts a scan.
-
insightvm-cloud-stop-scanStops the scan with the specified identifier.
category: Vulnerability Management provider: Rapid7 commonfields: id: Rapid7 InsightVM Cloud version: -1 configuration: - display: Username name: credentials required: true type: 9 - defaultvalue: 'false' display: Trust any certificate (not secure) name: insecure type: 8 required: false - defaultvalue: https://us.api.insight.rapid7.com/vm display: Server URL (e.g., https://example.net) name: base_url required: true type: 0 - display: Use system proxy settings name: proxy type: 8 required: false description: InsightVM is a vulnerability management tool that can scan your network, eliminate vulnerabilities, and track and communicate its progress. display: Rapid7 InsightVM Cloud name: Rapid7 InsightVM Cloud script: commands: - arguments: - description: The identifier of the asset to retrieve the details for. name: asset_id required: true description: Returns the assessment and details of an asset (specified by ID). Only assets that the caller has access to can be returned. name: insightvm-cloud-get-asset - arguments: - description: The identifier of the scan. name: scan_id required: true description: Retrieves the scan with the specified identifier. name: insightvm-cloud-get-scan - arguments: - defaultValue: '0' description: The index of the page to retrieve. name: page - defaultValue: '10' description: The number of records per page to retrieve. name: size description: Retrieves a page of scan engines. name: insightvm-cloud-get-scan-engines - arguments: [] description: Returns an indicator of the health of the API. name: insightvm-cloud-get-health-check - arguments: - description: Search criteria for filtering assets returned. name: hostname required: true - defaultValue: '0' description: The index of the page (zero-based) to retrieve. name: page - defaultValue: '10' description: The number of records per page to retrieve. name: size description: Returns the inventory, assessment, and summary details for a page of assets. name: insightvm-cloud-search-assets - arguments: - defaultValue: '0' description: The index of the page (zero-based) to retrieve. name: page - defaultValue: '10' description: The number of records per page to retrieve. name: size description: Returns the details for sites. name: insightvm-cloud-last-sites - arguments: - defaultValue: '0' description: The index of the page to retrieve. name: page - defaultValue: '10' description: The number of records per page to retrieve. name: size - description: Query by which to search for vulnerabilities. name: query required: true description: Returns all vulnerabilities that can be accessed. name: insightvm-cloud-search-vulnerabilities - arguments: - description: A comma-separated list of asset IDs to scan. name: asset_id required: true - description: The name of the scan. name: name description: Starts a scan. name: insightvm-cloud-start-scan - arguments: - description: The identifier of the asset used to stop the scan. name: id required: true description: Stops the scan with the specified identifier. name: insightvm-cloud-stop-scan dockerimage: demisto/python3:3.12.8.3296088 runonce: false script: '' subtype: python3 type: python fromversion: 6.0.0 tests: - No tests (auto formatted)