NexposeEmailParser

Parses nexpose report into a clear table that contain risk score and vulnerability count for each server, And creates a new incident for each server.

javascript · Rapid7 InsightVM

Details

ID	`NexposeEmailParser`
Language	javascript
From Version	5.0.0
Tags	nexpose ingestion

README

Parses the Nexpose report into a clear table that contains risk scores and vulnerability counts for each server, and creates a new incident for each server.

Script Data

Name	Description
Script Type	javascript
Tags	nexpose, ingestion

Dependencies

This script uses the following commands and scripts.

nexpose

Inputs

Argument Name	Description
entryID	The ID of the entry containing the Nexpose report. If none is provided, the script will iterate and find a relevant entry.
minRiskScore	The Minimal Risk Score an item in the report needs to reach in order to trigger an incident. Leave this field empty to trigger for any risk score.
minVulnCount	The Minimal Vulnerability Count an item in the report needs to reach in order to trigger an incident. Leave this field empty to trigger for any count.
defaultNexposeSeverity	The severity to be set on the triggered incidents.

Outputs

There are no outputs for this script.

Source

NexposeEmailParser.js NexposeEmailParser.yml

Download History Raw

commonfields:
  id: NexposeEmailParser
  version: -1
name: NexposeEmailParser
script: ''
type: javascript
tags:
- nexpose
- ingestion
comment: |-
  Parses nexpose report into a clear table that contain risk score and vulnerability count for each server,
  And creates a new incident for each server.
system: true
args:
- name: entryID
  description: ID of the entry containing the Nexpose report. If none is provided,
    the script will iterate and find a relevant entry.
- name: minRiskScore
  description: Minimal Risk Score an item in the report needs to reach in order to
    trigger an incident. Leave empty to trigger for any risk score.
- name: minVulnCount
  description: Minimal Vulnerability Count an item in the report needs to reach in
    order to trigger an incident. Leave empty to trigger for any count.
- name: defaultNexposeSeverity
  description: Severity to be set on triggered incidents.
scripttarget: 0
dependson:
  must:
  - nexpose
timeout: 0s
tests:
- No tests (auto formatted)
fromversion: 5.0.0
supportedModules:
- agentix
- xsiam
- edr
- cloud
- cloud_runtime_security