Vulnerabilities Supported Fields

This document shows the fields supported by each provider and operation.

create_asset

Field	Nucleus VM	Type
asset_info.cloud_provider	✅	string
asset_info.container_info.container_id	✅	string
asset_info.container_info.created_at	✅	string
asset_info.container_info.image.name	✅	string
asset_info.container_info.runtime	✅	string
asset_info.container_info.state	✅	string
asset_location	✅	string
asset_name	✅	string
asset_name_secondary[]	✅	string
asset_type	✅	string
image_tags[]	✅	string
ip_address	✅	string
ip_address_secondary[]	✅	string
mac_address	✅	string
operating_system_name	✅	string
operating_system_version	✅	string

create_findings

Field	Nucleus VM	Type
custom_finding_description	✅	string
custom_finding_name	✅	string
custom_finding_recommendation	✅	string
custom_finding_severity	✅	string
custom_finding_type	✅	string
finding_additional_information	✅	string
finding_discovered	✅	string
host_id	✅	number

get_scan_activities

Field	Qualys VMDR	Tanium VM	Tenable SC	Tenable VM	[MOCK] Tanium Vulnerability Management	Type
activity	✅	❌	❌	❌	❌	string
activity_id	✅	✅	✅	✅	✅	number
activity_name	❌	✅	✅	✅	✅	string
actor.user.firstname	❌	❌	✅	❌	❌	string
actor.user.lastname	❌	❌	✅	❌	❌	string
actor.user.uid	✅	❌	✅	✅	❌	string
actor.user.username	❌	❌	✅	❌	❌	string
actor.user.uuid	❌	❌	✅	❌	❌	string
category_name	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	number
class_name	✅	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	number
command_uid	✅	✅	✅	✅	✅	string
duration	✅	❌	✅	❌	❌	number
end_time	✅	❌	✅	✅	❌	timestamp
metadata.loggers[].log_name	❌	❌	❌	✅	❌	string
metadata.loggers[].log_provider	❌	❌	❌	✅	❌	string
metadata.product.name	✅	✅	❌	✅	✅	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	string
metadata.uid	❌	✅	✅	✅	✅	string
metadata.version	✅	✅	✅	✅	✅	string
num_detections	✅	❌	❌	✅	❌	number
num_hosts	✅	❌	❌	✅	❌	mixed
num_network_items	❌	✅	✅	❌	✅	number
num_resolutions	❌	❌	❌	✅	❌	number
policy.name	✅	❌	✅	✅	❌	string
policy.uid	✅	❌	✅	❌	❌	string
scan.name	✅	✅	✅	✅	✅	string
scan.targets[]	✅	❌	❌	✅	❌	string
scan.type	❌	✅	✅	❌	✅	string
scan.type_id	✅	✅	✅	✅	✅	number
scan.uid	❌	✅	✅	✅	✅	string
schedule_uid	❌	❌	❌	✅	❌	string
severity	✅	✅	✅	✅	✅	string
severity_id	✅	✅	✅	✅	✅	number
start_time	✅	✅	✅	✅	✅	timestamp
status	❌	✅	✅	✅	✅	string
status_code	❌	✅	✅	❌	✅	string
status_detail	❌	❌	✅	✅	❌	string
status_id	❌	✅	✅	✅	✅	number
time	✅	✅	✅	✅	✅	number
total	❌	✅	✅	✅	✅	number
type_name	✅	✅	✅	✅	✅	string
type_uid	✅	✅	✅	✅	✅	number

get_scan_activity

Field	Qualys VMDR	Tenable VM	Type
activity	✅	❌	string
activity_id	✅	✅	number
activity_name	❌	✅	string
actor.user.uid	✅	✅	string
category_name	✅	✅	string
category_uid	✅	✅	number
class_name	✅	✅	string
class_uid	✅	✅	number
command_uid	✅	✅	string
duration	✅	❌	number
end_time	✅	✅	timestamp
metadata.loggers[].log_name	❌	✅	string
metadata.loggers[].log_provider	❌	✅	string
metadata.product.name	✅	✅	string
metadata.product.vendor_name	✅	✅	string
metadata.uid	❌	✅	string
metadata.version	✅	✅	string
num_detections	✅	✅	number
num_hosts	✅	✅	mixed
num_resolutions	❌	✅	number
policy.name	✅	✅	string
policy.uid	✅	❌	string
scan.name	✅	✅	string
scan.targets[]	✅	✅	string
scan.type_id	✅	✅	number
scan.uid	❌	✅	string
schedule_uid	❌	✅	string
severity	✅	✅	string
severity_id	✅	✅	number
start_time	✅	✅	timestamp
status	❌	✅	string
status_detail	❌	✅	string
status_id	❌	✅	number
time	✅	✅	number
total	❌	✅	number
type_name	✅	✅	string
type_uid	✅	✅	number

query_assets

Field	Amazon Inspector	Axonius	CrowdStrike Falcon® Spotlight	Horizon3 NodeZero	Iru	Microsoft Defender for Endpoint	Nucleus VM	Qualys VMDR	Rapid7 InsightVM	ServiceNow Vulnerability Response	Tanium VM	Tenable SC	Tenable VM	Wiz Vulnerabilities	[Mock] CrowdStrike Falcon® Spotlight	Type
activity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
activity_name	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	string
category_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
class_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
cloud.account.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
cloud.account.type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	✅	❌	string
cloud.account.type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	number
cloud.account.uid	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	✅	❌	string
cloud.project_uid	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
cloud.provider	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	✅	❌	string
cloud.region	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	string
cloud.zone	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
count	✅	❌	✅	❌	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	number
device.agent_list[].name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	string
device.agent_list[].type_id	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	number
device.agent_list[].vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.agent_list[].version	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	string
device.created_time	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	timestamp
device.created_time_dt	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	string
device.desc	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.domain	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	string
device.first_seen_time	❌	✅	✅	✅	✅	✅	❌	✅	❌	✅	✅	❌	✅	✅	✅	timestamp
device.first_seen_time_dt	❌	❌	✅	✅	✅	✅	❌	✅	❌	✅	❌	❌	❌	✅	✅	string
device.groups[].desc	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.groups[].name	❌	❌	❌	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	string
device.groups[].type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
device.groups[].uid	❌	❌	✅	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	string
device.hostname	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.hw_info.bios_manufacturer	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hw_info.bios_uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.hw_info.bios_ver	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hw_info.chassis	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hw_info.cpu_cores	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
device.hw_info.cpu_speed	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
device.hw_info.cpu_type	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	string
device.hw_info.ram_size	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
device.hw_info.serial_number	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	string
device.hw_info.uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.hw_info.vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	string
device.image.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.image.tag	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.image.uid	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	string
device.instance_uid	✅	✅	✅	❌	✅	❌	✅	✅	❌	❌	✅	❌	✅	❌	✅	string
device.ip	❌	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.ip_addresses[]	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	✅	string
device.is_managed	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	boolean
device.last_seen_time	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	timestamp
device.last_seen_time_dt	❌	❌	✅	✅	✅	✅	❌	✅	✅	✅	❌	❌	❌	✅	✅	string
device.mac	❌	✅	✅	✅	❌	✅	✅	❌	❌	✅	✅	✅	✅	✅	✅	string
device.mac_addresses[]	❌	❌	✅	❌	❌	❌	✅	❌	❌	❌	✅	❌	❌	✅	✅	string
device.model	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.modified_time	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	timestamp
device.modified_time_dt	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	string
device.name	✅	✅	✅	✅	✅	✅	❌	❌	❌	✅	✅	❌	❌	✅	✅	string
device.netbios_names[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	string
device.network_interfaces[].hostname	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	✅	❌	string
device.network_interfaces[].ip	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	✅	❌	string
device.network_interfaces[].ip_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.network_interfaces[].mac	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	✅	✅	❌	string
device.network_interfaces[].mac_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.network_interfaces[].name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	string
device.network_interfaces[].type	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.network_interfaces[].type_id	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	✅	❌	✅	✅	❌	number
device.network_interfaces[].uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	string
device.network_status	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	string
device.network_status_id	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	number
device.org.name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.org.uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.os.build	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.os.cpe_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	string
device.os.name	❌	✅	✅	✅	✅	✅	✅	❌	✅	❌	✅	✅	✅	✅	✅	string
device.os.type	❌	✅	✅	✅	✅	✅	❌	❌	❌	❌	✅	❌	❌	✅	✅	string
device.os.type_id	❌	✅	✅	✅	✅	✅	❌	❌	✅	❌	✅	✅	✅	✅	✅	number
device.os.version	❌	❌	✅	❌	✅	✅	✅	❌	✅	❌	✅	❌	❌	❌	✅	mixed
device.owner.name	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.owner.uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.region	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	✅	❌	mixed
device.risk_level	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.risk_level_id	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
device.risk_score	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	✅	❌	❌	❌	number
device.subnet	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.subnet_uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
device.sw_info[].cpe_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.sw_info[].name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	string
device.sw_info[].vendor_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	string
device.sw_info[].version	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	string
device.type	✅	❌	✅	✅	❌	✅	❌	✅	✅	✅	❌	✅	✅	✅	✅	string
device.type_id	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	number
device.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.uid_alt	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
device.vendor_name	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	string
device.vpc_uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	string
device.zone	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	string
duration	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	number
enrichments[].data	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].type	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].value	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
message	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.extensions[].name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].version	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.labels[]	❌	❌	✅	❌	❌	✅	❌	✅	✅	✅	❌	❌	✅	✅	✅	string
metadata.log_provider	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.loggers[].logged_time	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	❌	❌	timestamp
metadata.loggers[].name	❌	❌	✅	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	❌	✅	string
metadata.loggers[].product.name	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	❌	❌	string
metadata.loggers[].product.vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	❌	❌	string
metadata.loggers[].uid	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
metadata.loggers[].version	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.product.name	✅	✅	❌	✅	✅	✅	❌	✅	✅	✅	❌	✅	✅	✅	❌	string
metadata.product.uid	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	❌	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
metadata.product.version	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	✅	string
metadata.profiles[]	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.tenant_uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.version	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
observables[].name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	string
observables[].type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	string
observables[].type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	number
observables[].value	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	string
osint[].type	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].type_id	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
osint[].uid	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].value	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vendor_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.desc	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.product.name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.product.vendor_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.title	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.uid	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].due_date	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].is_ransomware	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
osint[].vulnerabilities[].remediation.desc	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].remediation.references[]	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
severity	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	string
severity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
status	❌	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	✅	✅	string
status_code	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
status_id	❌	❌	✅	❌	❌	✅	✅	✅	✅	❌	✅	❌	✅	✅	✅	number
time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
time_dt	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	string
timezone_offset	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
type_name	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	string
type_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number

query_findings

Field	Amazon Inspector	Axonius	CrowdStrike Falcon® Spotlight	Horizon3 NodeZero	Iru	Microsoft Defender for Endpoint	Nucleus VM	Qualys VMDR	Rapid7 InsightVM	ServiceNow Vulnerability Response	Tanium VM	Tenable SC	Tenable VM	Wiz Vulnerabilities	[Mock] CrowdStrike Falcon® Spotlight	Type
activity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
activity_name	✅	✅	✅	✅	❌	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	string
analytic.name	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
analytic.type	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
analytic.type_id	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
analytic.uid	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].sub_technique.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].sub_technique.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].sub_technique.uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].tactic.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].tactic.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].tactic.uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].technique.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].technique.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].technique.uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
category_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
class_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
cloud.account.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	string
cloud.account.uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	string
cloud.provider	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	string
cloud.region	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	string
cloud.resource.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
cloud.resource.type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
cloud.resource.uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
confidence	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
confidence_id	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
count	✅	✅	✅	✅	❌	❌	✅	❌	✅	✅	✅	✅	✅	✅	✅	number
data_sources[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.agent_list[].uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.created_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	timestamp
device.created_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.hostname	❌	✅	✅	✅	❌	❌	❌	❌	✅	✅	❌	❌	✅	❌	✅	string
device.hw_info.vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.image.uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.ip	❌	❌	❌	✅	❌	❌	✅	✅	✅	✅	✅	✅	✅	✅	❌	string
device.ip_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
device.last_seen_time	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	❌	timestamp
device.mac	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	❌	❌	string
device.modified_time	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	timestamp
device.name	✅	✅	❌	✅	✅	✅	✅	❌	❌	✅	✅	❌	❌	✅	❌	string
device.os.lang	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.os.name	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	✅	✅	string
device.os.type	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	✅	✅	string
device.os.type_id	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	✅	✅	number
device.os.version	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	string
device.region	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.risk_score	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
device.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.subnet	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.subnet_uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.type	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.type_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
device.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.vpc_uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
end_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
end_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].data	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].name	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].value	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
evidence.data.cve_id	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
evidence.data.cvss_score	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
evidence.data.severity	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.created_time	❌	❌	❌	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	timestamp
finding.created_time_dt	❌	❌	❌	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	string
finding.desc	✅	✅	✅	❌	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	string
finding.first_seen_time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	timestamp
finding.first_seen_time_dt	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.last_seen_time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	timestamp
finding.last_seen_time_dt	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.modified_time	✅	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	✅	❌	❌	timestamp
finding.modified_time_dt	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	✅	❌	❌	string
finding.product_uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	string
finding.remediation.desc	✅	❌	✅	❌	❌	❌	✅	❌	❌	❌	✅	✅	✅	✅	✅	string
finding.scan_date	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.src_url	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
finding.title	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.types[]	✅	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	✅	❌	string
finding.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.xattributes.attack_paths_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.credentials_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.critical_impacts_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.critical_impacts_percentage	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.is_one_click_verify	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
finding.xattributes.min_time_to_finding_hms	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.xattributes.min_time_to_finding_s	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.total_impacts_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
message	❌	✅	❌	❌	✅	❌	❌	✅	✅	❌	❌	✅	✅	✅	❌	string
metadata.extensions[].name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].version	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.logged_time	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
metadata.processed_time	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
metadata.processed_time_dt	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.product.name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	string
metadata.product.uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
metadata.product.version	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.profiles[]	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.tenant_uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.uid	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	❌	✅	✅	❌	string
metadata.version	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
observables[].name	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
observables[].type	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
observables[].type_id	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
observables[].value	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].comment	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
osint[].confidence	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	unknown
osint[].confidence_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	number
osint[].type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	number
osint[].value	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
osint[].vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
remediation.desc	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
remediation.kb_articles[]	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
remediation.references[]	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].agent_list[].name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.agent_uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.assessed_for_policies	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	boolean
resources[].data.assessed_for_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	boolean
resources[].data.asset_criticality	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.bios_uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.compliance.cveFindings[].cisaShortDescription	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cisaVulnerabilityName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cveId	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cveYear	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cvssScore	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
resources[].data.compliance.cveFindings[].cvssScoreV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
resources[].data.compliance.cveFindings[].firstFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].lastFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].lastScanDate	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].severity	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].severityV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].summary	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.created_at	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.critical_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.desc	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.device_type	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.domain	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.domainName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.eidFirstSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.eidLastSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.exploits	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.fqdn	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.has_run_container	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	boolean
resources[].data.host_name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.hostname	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	❌	❌	string
resources[].data.id	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.image_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.instance_id	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.internet_exposure	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.ip	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.ipAddress	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.ipAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.ip[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.ip_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.ipv4	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.is_database_server	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_load_balancer	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_mail_server	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_vpn	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_waf	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.last_assessed_for_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.last_authenticated_results	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.last_scan_end	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.last_scan_start	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.local_ip	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.mac	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.macAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.mac_address	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.machine_domain	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.malware_kits	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.manufacturer	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.model	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.moderate_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	string
resources[].data.native_type	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.network_id	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	❌	string
resources[].data.operating_system[]	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	❌	string
resources[].data.os.cpu_bits	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.os.generation	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.os.language	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.os.name	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	✅	❌	❌	❌	❌	string
resources[].data.os.platform	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.os.type	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.os.type_id	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.os.version	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.os_fingerprints[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.os_names[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.os_version	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.ou	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.platform	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.port	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	mixed
resources[].data.portal_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.product_type_desc	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.protocol	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.provider_unique_id	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.risk_score	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.serialNumber	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.service_provider	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.severe_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.site_name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.status	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.subnet	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.systemUUID	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].data.system_manufacturer	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.total_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	number
resources[].data.tracked	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	❌	boolean
resources[].data.uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].desc	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cisaShortDescription	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cisaVulnerabilityName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cveId	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cveYear	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cvssScore	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
resources[].device.compliance.cveFindings[].cvssScoreV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
resources[].device.compliance.cveFindings[].firstFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].lastFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].lastScanDate	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].severity	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].severityV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].summary	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.domainName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.eidFirstSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.eidLastSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.id	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.ipAddress	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.ipAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.macAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.manufacturer	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.model	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.os.generation	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.os.language	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.os.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.os.platform	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].device.serialNumber	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
resources[].hostname	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].ip	❌	❌	❌	✅	❌	❌	✅	✅	✅	✅	✅	✅	❌	✅	❌	string
resources[].labels[]	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	string
resources[].last_seen_time	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	❌	timestamp
resources[].mac	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	❌	string
resources[].name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
resources[].os_type	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	string
resources[].owner.account.uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].owner.uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].region	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].type	✅	✅	❌	✅	✅	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	string
resources[].type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	number
resources[].uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
resources[].vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].vendor_uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
risk_score	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	number
severity	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
severity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
start_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
start_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
state	✅	✅	❌	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	string
state_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
status	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
status_id	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
time_dt	❌	❌	❌	✅	✅	❌	❌	✅	❌	✅	❌	❌	❌	✅	❌	string
timezone_offset	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
type_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
type_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
vulnerabilities[].advisory.created_time	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].advisory.created_time_dt	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].advisory.desc	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.modified_time	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].advisory.modified_time_dt	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.references[]	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.related_cves[].uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.related_cwes[].uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.src_url	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.title	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.uid	✅	❌	❌	✅	❌	✅	❌	✅	✅	✅	❌	✅	✅	❌	❌	string
vulnerabilities[].affected_packages[].architecture	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].cpe_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].affected_packages[].epoch	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
vulnerabilities[].affected_packages[].fixed_in_version	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].name	✅	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].affected_packages[].package_manager	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].path	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].release	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].remediation.desc	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].type_id	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
vulnerabilities[].affected_packages[].vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].version	✅	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].category	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.created_time	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].cve.created_time_dt	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].cve.cvss[].base_score	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
vulnerabilities[].cve.cvss[].metrics[].name	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	string
vulnerabilities[].cve.cvss[].metrics[].value	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	string
vulnerabilities[].cve.cvss[].overall_score	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	unknown
vulnerabilities[].cve.cvss[].severity	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
vulnerabilities[].cve.cvss[].vector_string	✅	✅	✅	❌	❌	✅	✅	✅	✅	✅	❌	✅	✅	❌	✅	string
vulnerabilities[].cve.cvss[].vendor_name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.cvss[].version	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
vulnerabilities[].cve.desc	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.epss.score	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	✅	❌	string
vulnerabilities[].cve.modified_time	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].cve.modified_time_dt	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.product.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.product.vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.references[]	✅	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.related_cwes[].uid	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.title	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
vulnerabilities[].desc	❌	✅	✅	✅	❌	❌	❌	✅	✅	❌	✅	❌	❌	✅	✅	string
vulnerabilities[].first_seen_time	❌	✅	✅	❌	✅	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	timestamp
vulnerabilities[].first_seen_time_dt	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].fix_available	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	✅	❌	boolean
vulnerabilities[].is_exploit_available	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	✅	boolean
vulnerabilities[].is_fix_available	❌	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	✅	✅	✅	❌	boolean
vulnerabilities[].kb_articles[]	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].last_seen_time	❌	✅	✅	❌	✅	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	timestamp
vulnerabilities[].last_seen_time_dt	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].packages[].name	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
vulnerabilities[].packages[].vendor_name	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].packages[].version	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
vulnerabilities[].references[]	✅	❌	✅	✅	❌	❌	✅	❌	✅	❌	❌	✅	✅	✅	✅	string
vulnerabilities[].remediation.desc	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].severity	❌	✅	✅	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	string
vulnerabilities[].title	❌	✅	✅	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	string
vulnerabilities[].vendor_name	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	✅	string
vulnerabilities[].xattributes.context_score_description	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.downstream_impact_types[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.has_proof	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
vulnerabilities[].xattributes.impact	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.impact_categories[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.op_id	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.portal_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].annotation	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].collected_at	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].command_outputs[].command	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].command_outputs[].output	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].created_at	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.description	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.id	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].op_id	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].proof_type	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].proven_entity_labels[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].uuid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string

query_scan_findings

Field	Horizon3 NodeZero	Type
activity_id	✅	number
activity_name	✅	string
category_name	✅	string
category_uid	✅	number
class_name	✅	string
class_uid	✅	number
device.first_seen_time	✅	timestamp
device.first_seen_time_dt	✅	string
device.hostname	✅	string
device.ip	✅	string
device.mac	✅	string
device.name	✅	string
device.os.name	✅	string
device.os.type	✅	string
device.os.type_id	✅	number
device.subnet	✅	string
device.type	✅	string
device.type_id	✅	number
device.uid	✅	string
finding_info.attacks[].sub_technique.name	✅	string
finding_info.attacks[].sub_technique.src_url	✅	string
finding_info.attacks[].sub_technique.uid	✅	string
finding_info.attacks[].tactic.name	✅	string
finding_info.attacks[].tactic.src_url	✅	string
finding_info.attacks[].tactic.uid	✅	string
finding_info.attacks[].technique.name	✅	string
finding_info.attacks[].technique.src_url	✅	string
finding_info.attacks[].technique.uid	✅	string
finding_info.first_seen_time	✅	timestamp
finding_info.first_seen_time_dt	✅	string
finding_info.src_url	✅	string
finding_info.title	✅	string
finding_info.uid	✅	string
finding_info.xattributes.op_id	✅	string
metadata.extensions[].name	✅	string
metadata.extensions[].uid	✅	string
metadata.extensions[].version	✅	string
metadata.product.name	✅	string
metadata.product.vendor_name	✅	string
metadata.profiles[]	✅	string
metadata.version	✅	string
resources[].data.port	✅	number
resources[].data.protocol	✅	string
resources[].ip	✅	string
resources[].name	✅	string
resources[].role	✅	string
resources[].role_id	✅	number
resources[].type	✅	string
resources[].uid	✅	string
severity	✅	string
severity_id	✅	number
time	✅	number
time_dt	✅	string
timezone_offset	✅	number
type_name	✅	string
type_uid	✅	number
vulnerabilities[].advisory.uid	✅	string
vulnerabilities[].category	✅	string
vulnerabilities[].cve.cvss[].base_score	✅	number
vulnerabilities[].cve.cvss[].vendor_name	✅	string
vulnerabilities[].cve.cvss[].version	✅	string
vulnerabilities[].cve.uid	✅	string
vulnerabilities[].cwe.uid	✅	string
vulnerabilities[].desc	✅	string
vulnerabilities[].is_exploit_available	✅	boolean
vulnerabilities[].references[]	✅	string
vulnerabilities[].remediation.desc	✅	string
vulnerabilities[].title	✅	string
vulnerabilities[].xattributes.has_proof	✅	boolean
vulnerabilities[].xattributes.impact	✅	string
vulnerabilities[].xattributes.impact_categories[]	✅	string
vulnerabilities[].xattributes.proofs[].annotation	✅	string
vulnerabilities[].xattributes.proofs[].collected_at	✅	string
vulnerabilities[].xattributes.proofs[].command_outputs[].command	✅	string
vulnerabilities[].xattributes.proofs[].command_outputs[].output	✅	string
vulnerabilities[].xattributes.proofs[].created_at	✅	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.description	✅	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.id	✅	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.name	✅	string
vulnerabilities[].xattributes.proofs[].op_id	✅	string
vulnerabilities[].xattributes.proofs[].proof_type	✅	string
vulnerabilities[].xattributes.proofs[].proven_entity_labels[]	✅	string
vulnerabilities[].xattributes.proofs[].uuid	✅	string

query_scans

Field	Horizon3 NodeZero	Qualys VMDR	Tanium VM	Tenable SC	Tenable VM	[MOCK] Tanium Vulnerability Management	Type
creation_time	✅	❌	✅	✅	✅	✅	timestamp
credentials[].description	❌	❌	❌	✅	❌	❌	string
credentials[].id	❌	❌	❌	✅	❌	❌	string
credentials[].name	❌	❌	❌	✅	❌	❌	string
credentials[].type	❌	❌	❌	✅	❌	❌	string
credentials[].uuid	❌	❌	❌	✅	❌	❌	string
ip_list	❌	❌	❌	✅	❌	❌	string
last_modified_time	✅	❌	✅	✅	✅	✅	timestamp
name	✅	✅	✅	✅	✅	✅	string
owner.firstname	❌	❌	❌	✅	❌	❌	string
owner.lastname	❌	❌	❌	✅	❌	❌	string
owner.uid	❌	✅	❌	✅	✅	❌	string
owner.username	❌	❌	❌	✅	❌	❌	string
owner.uuid	❌	❌	❌	✅	❌	❌	string
owner_group.id	❌	❌	❌	✅	❌	❌	string
owner_group.name	❌	❌	❌	✅	❌	❌	string
policy.id	❌	❌	❌	✅	❌	❌	string
policy.name	❌	❌	❌	✅	❌	❌	string
policy.uuid	❌	❌	❌	✅	❌	❌	string
repository.dataFormat	❌	❌	❌	✅	❌	❌	string
repository.description	❌	❌	❌	✅	❌	❌	string
repository.id	❌	❌	❌	✅	❌	❌	string
repository.name	❌	❌	❌	✅	❌	❌	string
repository.type	❌	❌	❌	✅	❌	❌	string
repository.uuid	❌	❌	❌	✅	❌	❌	string
scan_type	❌	❌	❌	✅	❌	❌	string
scan_uuid	❌	❌	❌	✅	❌	❌	string
schedule.days[]	❌	✅	❌	❌	❌	❌	string
schedule.frequency	❌	✅	✅	❌	✅	✅	string
schedule.repeat_interval	❌	✅	✅	❌	✅	✅	number
schedule.start_datetime	❌	❌	✅	❌	❌	✅	string
schedule.time	❌	✅	✅	❌	✅	✅	string
schedule_source.enabled	❌	❌	❌	✅	❌	❌	string
schedule_source.id	❌	❌	❌	✅	❌	❌	string
schedule_source.nextRun	❌	❌	❌	✅	❌	❌	number
schedule_source.objectType	❌	❌	❌	✅	❌	❌	string
schedule_source.repeatRule	❌	❌	❌	✅	❌	❌	string
schedule_source.start	❌	❌	❌	✅	❌	❌	string
schedule_source.type	❌	❌	❌	✅	❌	❌	string
status	❌	❌	❌	✅	✅	❌	string
uid	✅	✅	✅	✅	✅	✅	string

update_asset

Field	Nucleus VM	Type
asset_info.cloud_provider	✅	string
asset_info.container_info.container_id	✅	string
asset_info.container_info.created_at	✅	string
asset_info.container_info.image.name	✅	string
asset_info.container_info.runtime	✅	string
asset_info.container_info.state	✅	string
asset_location	✅	string
asset_name_secondary[]	✅	string
image_tags[]	✅	string
ip_address	✅	string
ip_address_secondary[]	✅	string
mac_address	✅	string
operating_system_name	✅	string
operating_system_version	✅	string

update_finding

Field	Nucleus VM	Type
comment	✅	string
due_date	✅	string
finding_severity	✅	string
finding_status	✅	string

Vulnerabilities Supported Fields

create_asset

create_findings

get_scan_activities

get_scan_activity

query_assets

query_findings

query_scan_findings

query_scans

update_asset

update_finding

Was this helpful?