Kenna - Search and Handle Asset Vulnerabilities

This playbook accepts an asset, then searches for vulnerabilities on that asset using the Kenna integration. If a vulnerability exists, it looks for relevant patches, lets the analyst deploy them and then generates an investigation summary report.

Kenna · 15 tasks · 2 inputs · 7 outputs

Inputs

  • hostname — Hostname to search.
  • host_id — Kenna host ID to search.

Outputs

  • Report.Name — Report file name.
  • Report.FileID — File ID of the report.
  • Kenna.Vulnerabilities.ID — The vulnerability ID.
  • Kenna.VulnerabilitiesOfAsset.ID — The ID of the vulnerability associated with the the asset.
  • Kenna.Fixes.ID — The fix ID.
  • Kenna.Fixes.Assets.ID — The asset ID related to the current fix.
  • Kenna.Fixes.Vulnerabilities.ID — The vulnerability ID related to the current fix.

Commands used

kenna-get-asset-vulnerabilities kenna-search-assets kenna-search-fixes kenna-search-vulnerabilities kenna-update-asset

Flowchart

yes yes yes yes Start Start Done Done CVE enrichment CVE enrichment Are there available fixes? Are there available fixes? Manually deploy patch Manually deploy patch Generate investigation summary report - GenerateInvestigationSummaryReport Generate investigation su... GenerateInvestigationSummaryR... Kenna - search vulnerability - kenna-search-vulnerabilities Kenna - search vulnerability kenna-search-vulnerabilities Kenna - get asset vulnerabilities - kenna-get-asset-vulnerabilities Kenna - get asset vulnera... kenna-get-asset-vulnerabilities Kenna - search assets - kenna-search-assets Kenna - search assets kenna-search-assets Kenna - search fixes - kenna-search-fixes Kenna - search fixes kenna-search-fixes Kenna - add note for asset - kenna-update-asset Kenna - add note for asset kenna-update-asset Were any vulnerabilities found? Were any vulnerabilities ... Remediation Remediation Is there a host to search? Is there a host to search? Is Kenna v2 integration enabled? Is Kenna v2 integration e...