args:
- defaultValue: 'False'
  description: Trending is defined by RiskSense as vulnerabilities that are being actively abused by attackers in the wild based on activity in hacker forums, Twitter feeds as well as analysis of 3rd party threat intelligence sources.
  name: trending
  required: true
comment: This script is a helper script of Ransomware Exposure - RiskSense playbook and retrieve information of cves and trending cves from host finding details.
commonfields:
  id: RiskSenseGetRansomewareCVEScript
  version: -1
name: RiskSenseGetRansomewareCVEScript
outputs:
- contextPath: RiskSense.RansomwareCves.Cve
  description: The ID of the CVE.
  type: String
- contextPath: RiskSense.RansomwareCves.CVSS
  description: The CVSS score of the CVE.
  type: Number
- contextPath: RiskSense.RansomwareCves.VRR
  description: The risk rate of the host finding.
  type: Number
- contextPath: RiskSense.RansomwareCves.ThreatCount
  description: The total number of threats associated with the CVE.
  type: Number
- contextPath: RiskSense.RansomwareCves.Trending
  description: This signifies whether the vulnerability (which is associated with the hostFinding) has been reported by our internal functions as being trending.
  type: boolean
- contextPath: RiskSense.RansomwareCves.VulnLastTrendingOn
  description: Date when last trending vulnerability was found.
  type: String
- contextPath: RiskSense.RansomwareCves.Description
  description: A description of the CVE.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Title
  description: The title of the threat.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Category
  description: The threat category.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Severity
  description: The severity level of the threat.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Description
  description: The threat description.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Cve
  description: List of CVEs that contain particular threat.
  type: Unknown
- contextPath: RiskSense.RansomwareCves.Threats.Source
  description: The source of the threat.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Published
  description: The time when the threat was published.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Updated
  description: The time when the threat was last updated.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.ThreatLastTrendingOn
  description: The last time when threat was in trending.
  type: String
- contextPath: RiskSense.RansomwareCves.Threats.Trending
  description: Whether the threat is trending.
  type: boolean
- contextPath: RiskSense.RansomwareTrendingCves.Cve
  description: The ID of the CVE.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.CVSS
  description: The CVSS score of the CVE.
  type: Number
- contextPath: RiskSense.RansomwareTrendingCves.VRR
  description: The risk rate of the host finding.
  type: Number
- contextPath: RiskSense.RansomwareTrendingCves.ThreatCount
  description: The total number of threats associated with the CVE.
  type: Number
- contextPath: RiskSense.RansomwareTrendingCves.Trending
  description: This signifies whether the vulnerability (which is associated with the hostFinding) has been reported by our internal functions as being trending.
  type: boolean
- contextPath: RiskSense.RansomwareTrendingCves.VulnLastTrendingOn
  description: Date when last trending vulnerability was found.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Description
  description: A description of the CVE.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Title
  description: The title of the threat.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Category
  description: The threat category.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Severity
  description: The severity level of the threat.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Description
  description: The threat description.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Cve
  description: List of CVEs that contain particular threat.
  type: Unknown
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Source
  description: The source of the threat.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Published
  description: The time when the threat was published.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Updated
  description: The time when the threat was last updated.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.ThreatLastTrendingOn
  description: The last time when threat was in trending.
  type: String
- contextPath: RiskSense.RansomwareTrendingCves.Threats.Trending
  description: Whether the threat is trending.
  type: boolean
- contextPath: Date.CurrentDate
  description: The current date.
  type: String
- contextPath: Date.WeekAgoDate
  description: The date that was 7 days ago starting from current date.
  type: String
- contextPath: CVECount
  description: The count of the CVEs.
  type: Number
- contextPath: TrendingCVECount
  description: The count of the trending CVEs.
  type: Number
script: '-'
subtype: python3
tags:
- RiskSense
timeout: '0'
type: python
dependson:
  must:
  - '|||risksense-get-host-findings'
dockerimage: demisto/python3:3.12.13.10116658
tests:
- No tests (auto formatted)
fromversion: 5.0.0