Scan Assets - Nexpose Deprecated

Deprecated. Use the "Scan Site - Nexpose" playbook instead.

Rapid7 InsightVM · 8 tasks · 3 inputs · 11 outputs

Details

IDscan_assets_nexpose
From Version5.0.0
Tasks8

README

Scans according to asset IP addresses or host names, and waits for the scan to finish by polling the scan status in pre-defined intervals.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • GenericPolling

Integrations

  • Rapid7 Nexpose

Scripts

This playbook does not use any scripts.

Commands

  • nexpose-get-scan
  • nexpose-start-assets-scan

Playbook Inputs

Name Description Default Value Required
IPs The asset IP addresses to scan. ${IP.Address} Optional
HostNames The hostnames of the assets to scan. ${Nexpose.Asset.HostName} Optional
Name The scan name as specified by the user. - Optional

Playbook Outputs

Path Description Type
Nexpose.Scan.ScanType The scan type. Can be, “automated”, “manual”, or “scheduled”. unknown
Nexpose.Scan.Completed The end time of the scan in ISO8601 format. unknown
Nexpose.Scan.StartedBy The name of the user that started the scan. unknown
Nexpose.Scan.Assets The number of assets found in the scan unknown
Nexpose.Scan.TotalTime The duration of the scan (in minutes). unknown
Nexpose.Scan.Id The identifier of the scan. unknown
Nexpose.Scan.Status The scan status. Can be, “aborted”, “unknown”, “running”, “finished”, “stopped”, “error”, “paused”, “dispatched”, or “integrating”. unknown
Nexpose.Scan.Vulnerabilities.Critical The number of critical vulnerabilities. unknown
Nexpose.Scan.Vulnerabilities.Moderate The number of moderate vulnerabilities. unknown
Nexpose.Scan.Vulnerabilities.Severe The number of severe vulnerabilities. unknown
Nexpose.Scan.Vulnerabilities.Total The total number of vulnerabilities. unknown

Playbook Image

Scan_Nexpose_Assets

Inputs

  • IPs — Asset IPs to scan
  • HostNames — Hostnames of the assets to scan
  • Name — The scan name as specified by the user.

Outputs

  • Nexpose.Scan.ScanType — The scan type (automated, manual, scheduled).
  • Nexpose.Scan.Completed — The end time of the scan in ISO8601 format.
  • Nexpose.Scan.StartedBy — The name of the user that started the scan.
  • Nexpose.Scan.Assets — The number of assets found in the scan
  • Nexpose.Scan.TotalTime — The duration of the scan in minutes.
  • Nexpose.Scan.Id — The identifier of the scan.
  • Nexpose.Scan.Status — The scan status. Valid values are aborted, unknown, running, finished, stopped, error, paused, dispatched, integrating
  • Nexpose.Scan.Vulnerabilities.Critical — The number of critical vulnerabilities.
  • Nexpose.Scan.Vulnerabilities.Moderate — The number of moderate vulnerabilities.
  • Nexpose.Scan.Vulnerabilities.Severe — The number of severe vulnerabilities.
  • Nexpose.Scan.Vulnerabilities.Total — The total number of vulnerabilities.

Commands used

nexpose-get-scan nexpose-start-assets-scan

Flowchart

yes yes yes Start Start Start scan - nexpose-start-assets-scan Start scan nexpose-start-assets-scan Done Done nexpose-get-scan - nexpose-get-scan nexpose-get-scan nexpose-get-scan GenericPolling - GenericPolling GenericPolling GenericPolling Is Nexpose enabled? Is Nexpose enabled? Is there an ip or host to scan? Is there an ip or host to... Did scan find assets? Did scan find assets?

Source

playbook-Scan_Nexpose_Assets.yml
Download History Raw 
id: scan_assets_nexpose
version: -1
name: Scan Assets - Nexpose
description: Deprecated. Use the "Scan Site - Nexpose" playbook instead.
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: 391dde59-b247-4641-8ef2-24a5c11b6d39
    type: start
    task:
      id: 391dde59-b247-4641-8ef2-24a5c11b6d39
      version: -1
      name: ""
      description: start
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "9"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 50
        }
      }
    note: false
  "1":
    id: "1"
    taskid: f123b950-46f6-4ffe-8ba5-3e327482cccd
    type: regular
    task:
      id: f123b950-46f6-4ffe-8ba5-3e327482cccd
      version: -1
      name: Start scan
      description: Starts a scan for specified asset IP addresses and host names.
      script: Rapid7 Nexpose|||nexpose-start-assets-scan
      type: regular
      iscommand: true
      brand: Rapid7 Nexpose
    nexttasks:
      '#none#':
      - "11"
    scriptarguments:
      IPs:
        complex:
          root: inputs.IPs
      hostNames:
        complex:
          root: inputs.HostNames
      name:
        complex:
          root: inputs.Name
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 380,
          "y": 545
        }
      }
    note: false
  "5":
    id: "5"
    taskid: 25518fb4-9985-4885-8d24-e3886014b9e3
    type: title
    task:
      id: 25518fb4-9985-4885-8d24-e3886014b9e3
      version: -1
      name: Done
      description: Final task
      type: title
      iscommand: false
      brand: ""
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 1245
        }
      }
    note: false
  "7":
    id: "7"
    taskid: bcc7a757-5464-43d9-8b00-756116fae3fa
    type: regular
    task:
      id: bcc7a757-5464-43d9-8b00-756116fae3fa
      version: -1
      name: nexpose-get-scan
      description: Returns the specified scan.
      script: Rapid7 Nexpose|||nexpose-get-scan
      type: regular
      iscommand: true
      brand: Rapid7 Nexpose
    nexttasks:
      '#none#':
      - "5"
    scriptarguments:
      id:
        simple: ${Nexpose.Scan.Id}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 380,
          "y": 1070
        }
      }
    note: false
  "8":
    id: "8"
    taskid: d8fac3db-f673-4daf-8ad8-a1cb112ddd01
    type: playbook
    task:
      id: d8fac3db-f673-4daf-8ad8-a1cb112ddd01
      version: -1
      name: GenericPolling
      description: Generic Polling Playbook
      playbookName: GenericPolling
      type: playbook
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "7"
    scriptarguments:
      Ids:
        simple: ${Nexpose.Scan.Id}
      Interval:
        simple: "1"
      PollingCommandArgName:
        simple: id
      PollingCommandName:
        simple: nexpose-get-scan
      Timeout:
        simple: "60"
      dt:
        simple: Nexpose.Scan(val.Status != 'finished' && val.Status != 'error' && val.Status != 'aborted' && val.Status != 'stopped').Id
    separatecontext: true
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
    view: |-
      {
        "position": {
          "x": 380,
          "y": 895
        }
      }
    note: false
  "9":
    id: "9"
    taskid: 6d61b22a-1fbe-4ffe-866a-81b522256c65
    type: condition
    task:
      id: 6d61b22a-1fbe-4ffe-866a-81b522256c65
      version: -1
      name: Is Nexpose enabled?
      description: Checks wheter nexpose is enabled
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "5"
      "yes":
      - "10"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: modules
                filters:
                - - operator: isEqualString
                    left:
                      value:
                        simple: modules.brand
                      iscontext: true
                    right:
                      value:
                        simple: Rapid7 Nexpose
                - - operator: isEqualString
                    left:
                      value:
                        simple: modules.state
                      iscontext: true
                    right:
                      value:
                        simple: active
                accessor: brand
            iscontext: true
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
    note: false
  "10":
    id: "10"
    taskid: 0f6c2fdc-f87f-4397-87a7-bcc7f8a54b50
    type: condition
    task:
      id: 0f6c2fdc-f87f-4397-87a7-bcc7f8a54b50
      version: -1
      name: Is there an ip or host to scan?
      description: Checks whether there's an ip or an host to scan.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "5"
      "yes":
      - "1"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              simple: inputs.IPs
            iscontext: true
        - operator: isExists
          left:
            value:
              simple: inputs.HostNames
            iscontext: true
    view: |-
      {
        "position": {
          "x": 380,
          "y": 360
        }
      }
    note: false
  "11":
    id: "11"
    taskid: 3b3f273c-1886-489d-83d7-48e1073c9880
    type: condition
    task:
      id: 3b3f273c-1886-489d-83d7-48e1073c9880
      version: -1
      name: Did scan find assets?
      description: Checks whether assets were found
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "5"
      "yes":
      - "8"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              simple: Nexpose.Scan.Id
            iscontext: true
    view: |-
      {
        "position": {
          "x": 380,
          "y": 720
        }
      }
    note: false
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 1260,
        "width": 710,
        "x": 50,
        "y": 50
      }
    }
  }
inputs:
- key: IPs
  value:
    simple: ${IP.Address}
  required: false
  description: Asset IPs to scan
- key: HostNames
  value:
    simple: ${Nexpose.Asset.HostName}
  required: false
  description: Hostnames of the assets to scan
- key: Name
  value: {}
  required: false
  description: The scan name as specified by the user.
outputs:
- contextPath: Nexpose.Scan.ScanType
  description: The scan type (automated, manual, scheduled).
- contextPath: Nexpose.Scan.Completed
  description: The end time of the scan in ISO8601 format.
- contextPath: Nexpose.Scan.StartedBy
  description: The name of the user that started the scan.
- contextPath: Nexpose.Scan.Assets
  description: The number of assets found in the scan
- contextPath: Nexpose.Scan.TotalTime
  description: The duration of the scan in minutes.
- contextPath: Nexpose.Scan.Id
  description: The identifier of the scan.
- contextPath: Nexpose.Scan.Status
  description: The scan status. Valid values are aborted, unknown, running, finished, stopped, error, paused, dispatched, integrating
- contextPath: Nexpose.Scan.Vulnerabilities.Critical
  description: The number of critical vulnerabilities.
- contextPath: Nexpose.Scan.Vulnerabilities.Moderate
  description: The number of moderate vulnerabilities.
- contextPath: Nexpose.Scan.Vulnerabilities.Severe
  description: The number of severe vulnerabilities.
- contextPath: Nexpose.Scan.Vulnerabilities.Total
  description: The total number of vulnerabilities.
fromversion: 5.0.0
tests:
- No test
deprecated: true
supportedModules:
- agentix
- xsiam
- edr
- cloud
- cloud_runtime_security