Kenna - Search and Handle Asset Vulnerabilities

This playbook accepts an asset, then searches for vulnerabilities on that asset using the Kenna integration. If a vulnerability exists, it looks for relevant patches, lets the analyst deploy them and then generates an investigation summary report.

Pack

Kenna

Tasks

15

Inputs

• hostname — Hostname to search.
• host_id — Kenna host ID to search.

Outputs

• Report.Name — Report file name.
• Report.FileID — File ID of the report.
• Kenna.Vulnerabilities.ID — The vulnerability ID.
• Kenna.VulnerabilitiesOfAsset.ID — The ID of the vulnerability associated with the the asset.
• Kenna.Fixes.ID — The fix ID.
• Kenna.Fixes.Assets.ID — The asset ID related to the current fix.
• Kenna.Fixes.Vulnerabilities.ID — The vulnerability ID related to the current fix.

Commands used

• kenna-get-asset-vulnerabilities
• kenna-search-assets
• kenna-search-fixes
• kenna-search-vulnerabilities
• kenna-update-asset