QualysCreateIncidentFromReport

Create incidents from a Qualys report (XML), based on the Qualys asset ID and vulnerability ID (QID). Duplicate incidents are not created for the same asset ID and QID.

python · Qualys

Details

ID	`QualysCreateIncidentFromReport`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	qualys

README

Creates incidents from a Qualys report (XML), based on the Qualys asset ID and vulnerability ID (QID).
Duplicates the incidents that are not created for the same asset ID and QID.

Script Data

Name	Description
Script Type	python
Tags	qualys

Dependencies

This script uses the following commands and scripts.

qualys-host-list

Inputs

Argument Name	Description
entryID	The War Room entryID of the XML report.
maxFileSize	The maximum file size to load, in bytes. The default is 1024 KB.
minSeverity	The minimum Qualys severity to create incidents for.
incidentType	The incident type to create incidents for. The default is “Vulnerability”.

Outputs

There are no outputs for this script.

Source

QualysCreateIncidentFromReport.py QualysCreateIncidentFromReport_test.py QualysCreateIncidentFromReport.yml

Download History Raw

commonfields:
  id: QualysCreateIncidentFromReport
  version: -1
name: QualysCreateIncidentFromReport
script: ''
type: python
subtype: python3
tags:
- qualys
comment: |-
  Create incidents from a Qualys report (XML), based on the Qualys asset ID and vulnerability ID (QID).
  Duplicate incidents are not created for the same asset ID and QID.
system: true
args:
- name: entryID
  required: true
  description: War room entryID of the XML report.
- name: maxFileSize
  description: Maximum file size to load, in bytes. Default is 1024 KB.
- name: minSeverity
  auto: PREDEFINED
  predefined:
  - '1'
  - '2'
  - '3'
  - '4'
  - '5'
  description: The minimum Qualys severity to create incidents for.
- name: incidentType
  description: The incident type to create incidents for. Default is "Vulnerability".
scripttarget: 0
runas: DBotWeakRole
dependson:
  must:
  - qualys-host-list
tests:
- No test
fromversion: 5.0.0
dockerimage: demisto/python3:3.12.13.10116658
supportedModules:
- agentix
- xsiam