PrismaCloudComputeParseVulnerabilityAlert

Parse Vulnerability alert raw JSON data.

python · Prisma Cloud Compute by Palo Alto Networks

Details

IDPrismaCloudComputeParseVulnerabilityAlert
Languagepython
From Version5.0.0
Docker Imagedemisto/python3:3.12.13.10116658
TagsPrisma Cloud Compute

README

Parse Vulnerability alert raw JSON data

Script Data

Name Description
Script Type python3
Tags Prisma Cloud Compute
Cortex XSOAR Version 5.0.0

Used In

This script is used in the following playbooks and scripts.

  • Prisma Cloud Compute - Vulnerability Alert

Inputs

Argument Name Description
alert_raw_json The vulneribility alert raw JSON data

Outputs

Path Description Type
PrismaCloudCompute.VulnerabilityAlert.time Vulnerability discovery time Date
PrismaCloudCompute.VulnerabilityAlert.imageName Impacted image name String
PrismaCloudCompute.VulnerabilityAlert.distroName Full name of the image distribution String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.cve CVE ID of the vulnerability String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.severity The Severity of the vulnerability String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.link The CVE vendor link String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.status The CVE vendor status String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.packages Package names String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.packageVersion The version of the package that caused the vulnerability String
PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.sourcePackage The name of the source package if such package exist, for os packages, source package is the package used to build the binary String

Source

PrismaCloudComputeParseVulnerabilityAlert.py PrismaCloudComputeParseVulnerabilityAlert_test.py PrismaCloudComputeParseVulnerabilityAlert.yml
Download History Raw 
args:
- description: The vulneribility alert raw JSON data.
  name: alert_raw_json
  required: true
tags:
- Prisma Cloud Compute
comment: Parse Vulnerability alert raw JSON data.
commonfields:
  id: PrismaCloudComputeParseVulnerabilityAlert
  version: -1
name: PrismaCloudComputeParseVulnerabilityAlert
outputs:
- contextPath: PrismaCloudCompute.VulnerabilityAlert.time
  description: 'Vulnerability discovery time.'
  type: Date
- contextPath: PrismaCloudCompute.VulnerabilityAlert.imageName
  description: 'Impacted image name.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.distroName
  description: 'Full name of the image distribution.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.cve
  description: 'CVE ID of the vulnerability.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.severity
  description: 'The Severity of the vulnerability.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.link
  description: 'The CVE vendor link.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.status
  description: 'The CVE vendor status.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.packages
  description: 'Package names.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.packageVersion
  description: 'The version of the package that caused the vulnerability.'
  type: String
- contextPath: PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.sourcePackage
  description: 'The name of the source package if such package exist, for os packages, source package is the package used to build the binary.'
  type: String
script: '-'
subtype: python3
timeout: '0'
type: python
dockerimage: demisto/python3:3.12.13.10116658
fromversion: 5.0.0
tests:
- No tests (auto formatted)