Vulnerabilities Supported Fields
Copy for LLM
Copy page as Markdown for LLMs
View as Markdown
Open this page as Markdown
Open in ChatGPT
Get insights from ChatGPT
Open in Claude
Get insights from Claude

This document shows the fields supported by each provider and operation.

create_asset

Field	Nucleus VM	Type
asset_info.cloud_provider	✅	string
asset_info.container_info.container_id	✅	string
asset_info.container_info.created_at	✅	string
asset_info.container_info.image.name	✅	string
asset_info.container_info.runtime	✅	string
asset_info.container_info.state	✅	string
asset_location	✅	string
asset_name	✅	string
asset_name_secondary[]	✅	string
asset_type	✅	string
image_tags[]	✅	string
ip_address	✅	string
ip_address_secondary[]	✅	string
mac_address	✅	string
operating_system_name	✅	string
operating_system_version	✅	string

create_findings

Field	Nucleus VM	Type
custom_finding_description	✅	string
custom_finding_name	✅	string
custom_finding_recommendation	✅	string
custom_finding_severity	✅	string
custom_finding_type	✅	string
finding_additional_information	✅	string
finding_discovered	✅	string
host_id	✅	number

get_scan_activities

Field	Qualys VMDR	Tanium VM	Tenable SC	Tenable VM	[MOCK] Tanium Vulnerability Management	Type
activity	✅	❌	❌	❌	❌	string
activity_id	✅	✅	✅	✅	✅	number
activity_name	❌	✅	✅	✅	✅	string
actor.user.firstname	❌	❌	✅	❌	❌	string
actor.user.lastname	❌	❌	✅	❌	❌	string
actor.user.uid	✅	❌	✅	✅	❌	string
actor.user.username	❌	❌	✅	❌	❌	string
actor.user.uuid	❌	❌	✅	❌	❌	string
category_name	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	number
class_name	✅	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	number
command_uid	✅	✅	✅	✅	✅	string
duration	✅	❌	✅	❌	❌	number
end_time	✅	❌	✅	✅	❌	timestamp
metadata.loggers[].log_name	❌	❌	❌	✅	❌	string
metadata.loggers[].log_provider	❌	❌	❌	✅	❌	string
metadata.product.name	✅	✅	❌	✅	✅	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	string
metadata.uid	❌	✅	✅	✅	✅	string
metadata.version	✅	✅	✅	✅	✅	string
num_detections	✅	❌	❌	✅	❌	number
num_hosts	✅	❌	❌	✅	❌	mixed
num_network_items	❌	✅	✅	❌	✅	number
num_resolutions	❌	❌	❌	✅	❌	number
policy.name	✅	❌	✅	✅	❌	string
policy.uid	✅	❌	✅	❌	❌	string
scan.name	✅	✅	✅	✅	✅	string
scan.targets[]	✅	❌	❌	✅	❌	string
scan.type	❌	✅	✅	❌	✅	string
scan.type_id	✅	✅	✅	✅	✅	number
scan.uid	❌	✅	✅	✅	✅	string
schedule_uid	❌	❌	❌	✅	❌	string
severity	✅	✅	✅	✅	✅	string
severity_id	✅	✅	✅	✅	✅	number
start_time	✅	✅	✅	✅	✅	timestamp
status	❌	✅	✅	✅	✅	string
status_code	❌	✅	✅	❌	✅	string
status_detail	❌	❌	✅	✅	❌	string
status_id	❌	✅	✅	✅	✅	number
time	✅	✅	✅	✅	✅	number
total	❌	✅	✅	✅	✅	number
type_name	✅	✅	✅	✅	✅	string
type_uid	✅	✅	✅	✅	✅	number

get_scan_activity

Field	Qualys VMDR	Tenable VM	Type
activity	✅	❌	string
activity_id	✅	✅	number
activity_name	❌	✅	string
actor.user.uid	✅	✅	string
category_name	✅	✅	string
category_uid	✅	✅	number
class_name	✅	✅	string
class_uid	✅	✅	number
command_uid	✅	✅	string
duration	✅	❌	number
end_time	✅	✅	timestamp
metadata.loggers[].log_name	❌	✅	string
metadata.loggers[].log_provider	❌	✅	string
metadata.product.name	✅	✅	string
metadata.product.vendor_name	✅	✅	string
metadata.uid	❌	✅	string
metadata.version	✅	✅	string
num_detections	✅	✅	number
num_hosts	✅	✅	mixed
num_resolutions	❌	✅	number
policy.name	✅	✅	string
policy.uid	✅	❌	string
scan.name	✅	✅	string
scan.targets[]	✅	✅	string
scan.type_id	✅	✅	number
scan.uid	❌	✅	string
schedule_uid	❌	✅	string
severity	✅	✅	string
severity_id	✅	✅	number
start_time	✅	✅	timestamp
status	❌	✅	string
status_detail	❌	✅	string
status_id	❌	✅	number
time	✅	✅	number
total	❌	✅	number
type_name	✅	✅	string
type_uid	✅	✅	number

query_assets

Field	Amazon Inspector	Axonius	CrowdStrike Falcon® Spotlight	Horizon3 NodeZero	Iru	Microsoft Defender for Endpoint	Nucleus VM	Qualys VMDR	Rapid7 InsightVM	ServiceNow USEM	ServiceNow Vulnerability Response	Tanium VM	Tenable ASM	Tenable SC	Tenable VM	Wiz Vulnerabilities	[Mock] CrowdStrike Falcon® Spotlight	Type
activity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
activity_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
category_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
class_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
cloud.account.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
cloud.account.type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	string
cloud.account.type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	number
cloud.account.uid	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	string
cloud.project_uid	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
cloud.provider	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	❌	✅	✅	❌	string
cloud.region	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	string
cloud.zone	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
count	✅	❌	✅	❌	✅	✅	✅	✅	✅	❌	❌	✅	❌	✅	✅	✅	✅	number
device.agent_list[].name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	string
device.agent_list[].type	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.agent_list[].type_id	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	number
device.agent_list[].vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.agent_list[].version	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	string
device.created_time	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	timestamp
device.created_time_dt	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	string
device.desc	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.domain	❌	❌	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌	✅	❌	❌	❌	✅	string
device.first_seen_time	❌	✅	✅	✅	✅	✅	❌	✅	❌	✅	✅	✅	✅	❌	✅	✅	✅	timestamp
device.first_seen_time_dt	❌	❌	✅	✅	✅	✅	❌	✅	❌	✅	✅	❌	✅	❌	❌	✅	✅	string
device.groups[].desc	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
device.groups[].name	❌	❌	❌	❌	✅	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
device.groups[].type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.groups[].uid	❌	❌	✅	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hostname	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.hw_info.bios_manufacturer	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hw_info.bios_uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.hw_info.bios_ver	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hw_info.chassis	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.hw_info.cpu_cores	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	number
device.hw_info.cpu_speed	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
device.hw_info.cpu_type	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.hw_info.ram_size	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
device.hw_info.serial_number	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	❌	✅	string
device.hw_info.uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	string
device.hw_info.vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	❌	❌	string
device.image.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.image.tag	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.image.uid	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.instance_uid	✅	✅	✅	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	✅	❌	✅	string
device.ip	❌	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.ip_addresses[]	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	✅	✅	string
device.is_managed	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	boolean
device.last_seen_time	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	timestamp
device.last_seen_time_dt	❌	❌	✅	✅	✅	✅	❌	✅	✅	✅	✅	❌	✅	❌	❌	✅	✅	string
device.location.city	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.location.continent	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.location.isp	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.location.lat	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
device.location.long	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	number
device.location.postal_code	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.location.timezone	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.mac	❌	✅	✅	✅	❌	✅	✅	❌	❌	✅	✅	✅	❌	✅	✅	✅	✅	string
device.mac_addresses[]	❌	❌	✅	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	string
device.model	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.modified_time	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	timestamp
device.modified_time_dt	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	string
device.name	✅	✅	✅	✅	✅	✅	❌	❌	❌	✅	✅	✅	✅	❌	❌	✅	✅	string
device.netbios_names[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	string
device.network_interfaces[].hostname	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	string
device.network_interfaces[].ip	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	string
device.network_interfaces[].ip_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.network_interfaces[].mac	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	✅	✅	❌	string
device.network_interfaces[].mac_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.network_interfaces[].name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	string
device.network_interfaces[].type	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.network_interfaces[].type_id	❌	❌	❌	❌	❌	✅	❌	✅	❌	❌	❌	✅	❌	❌	✅	✅	❌	number
device.network_interfaces[].uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	string
device.network_status	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	string
device.network_status_id	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	number
device.org.name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.org.uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.os.build	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
device.os.cpe_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	string
device.os.name	❌	✅	✅	✅	✅	✅	✅	❌	✅	❌	❌	✅	❌	✅	✅	✅	✅	string
device.os.type	❌	✅	✅	✅	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	string
device.os.type_id	❌	✅	✅	✅	✅	✅	❌	❌	✅	❌	❌	✅	❌	✅	✅	✅	✅	number
device.os.version	❌	❌	✅	❌	✅	✅	✅	❌	✅	❌	❌	✅	❌	❌	❌	❌	✅	string
device.owner.name	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.owner.uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.region	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	mixed
device.risk_level	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.risk_level_id	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	✅	❌	❌	❌	❌	number
device.risk_score	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	❌	number
device.subnet	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.subnet_uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.sw_info[].cpe_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.sw_info[].name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	string
device.sw_info[].vendor_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	string
device.sw_info[].version	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	string
device.type	✅	❌	✅	✅	❌	✅	❌	✅	✅	✅	✅	❌	❌	✅	✅	✅	✅	string
device.type_id	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
device.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.uid_alt	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
device.vendor_name	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	✅	string
device.vpc_uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.zone	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
duration	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
enrichments[].data	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].type	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].value	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
message	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.extensions[].name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].version	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.labels[]	❌	❌	✅	❌	❌	✅	❌	✅	✅	✅	✅	❌	✅	❌	✅	✅	✅	string
metadata.log_provider	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.loggers[].logged_time	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
metadata.loggers[].name	❌	❌	✅	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	✅	string
metadata.loggers[].product.name	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.loggers[].product.vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.loggers[].uid	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.loggers[].version	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.product.feature.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
metadata.product.name	✅	✅	❌	✅	✅	✅	❌	✅	✅	✅	✅	❌	✅	✅	✅	✅	❌	string
metadata.product.uid	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
metadata.product.version	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	✅	string
metadata.profiles[]	❌	✅	✅	✅	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.tenant_uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.version	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
observables[].name	✅	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	string
observables[].type	✅	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	✅	string
observables[].type_id	✅	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	number
observables[].value	✅	❌	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	❌	✅	❌	✅	string
osint[].type	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].type_id	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
osint[].uid	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].value	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vendor_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.desc	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.product.name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.product.vendor_name	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.title	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].cve.uid	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].due_date	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].is_ransomware	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
osint[].vulnerabilities[].remediation.desc	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vulnerabilities[].remediation.references[]	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
severity	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	string
severity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
status	❌	❌	✅	❌	❌	✅	❌	✅	❌	✅	❌	❌	✅	❌	❌	✅	✅	string
status_code	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
status_id	❌	❌	✅	❌	❌	✅	✅	✅	✅	✅	❌	✅	✅	❌	✅	✅	✅	number
time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
time_dt	❌	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	❌	✅	❌	❌	✅	❌	string
timezone_offset	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
type_name	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	string
type_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number

query_findings

Field	Amazon Inspector	Axonius	CrowdStrike Falcon® Spotlight	Horizon3 NodeZero	Iru	Microsoft Defender for Endpoint	Nucleus VM	Qualys VMDR	Rapid7 InsightVM	ServiceNow USEM	ServiceNow Vulnerability Response	Tanium VM	Tenable ASM	Tenable SC	Tenable VM	Wiz Vulnerabilities	[Mock] CrowdStrike Falcon® Spotlight	Type
activity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
activity_name	✅	✅	✅	✅	❌	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
analytic.name	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
analytic.type	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
analytic.type_id	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
analytic.uid	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].sub_technique.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].sub_technique.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].sub_technique.uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].tactic.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].tactic.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].tactic.uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].technique.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].technique.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
attacks[].technique.uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
category_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
class_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
cloud.account.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
cloud.account.uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
cloud.provider	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
cloud.region	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
cloud.resource.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
cloud.resource.type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
cloud.resource.uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
confidence	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
confidence_id	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
count	✅	✅	✅	✅	❌	❌	✅	❌	✅	✅	✅	✅	❌	✅	✅	✅	✅	number
data_sources[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
device.agent_list[].uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
device.created_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	timestamp
device.created_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.domain	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
device.hostname	❌	✅	✅	✅	❌	❌	❌	❌	✅	✅	✅	❌	✅	❌	✅	❌	✅	string
device.hw_info.vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
device.image.uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.ip	❌	❌	❌	✅	❌	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	string
device.ip_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
device.last_seen_time	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	✅	❌	❌	❌	❌	❌	timestamp
device.mac	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	✅	❌	❌	string
device.modified_time	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	timestamp
device.name	✅	✅	❌	✅	✅	✅	✅	❌	❌	✅	✅	✅	✅	❌	❌	✅	❌	string
device.os.lang	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
device.os.name	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	✅	✅	✅	string
device.os.type	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	✅	✅	✅	string
device.os.type_id	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	✅	✅	✅	number
device.os.version	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	string
device.region	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.risk_score	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
device.src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.subnet	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.subnet_uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
device.type	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	string
device.type_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
device.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
device.vpc_uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
end_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
end_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].data	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
enrichments[].name	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
enrichments[].value	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
evidence.data.cve_id	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
evidence.data.cvss_score	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
evidence.data.severity	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
evidences[].data.vulnerability_id	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
evidences[].src_url	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	string
finding.created_time	❌	❌	❌	❌	✅	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	timestamp
finding.created_time_dt	❌	❌	❌	❌	✅	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
finding.desc	✅	✅	✅	❌	✅	✅	✅	✅	✅	❌	❌	✅	❌	✅	✅	✅	✅	string
finding.first_seen_time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	timestamp
finding.first_seen_time_dt	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	string
finding.last_seen_time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	timestamp
finding.last_seen_time_dt	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.modified_time	✅	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	timestamp
finding.modified_time_dt	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	string
finding.product_uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	string
finding.remediation.desc	✅	❌	✅	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	✅	✅	✅	✅	string
finding.scan_date	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.src_url	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
finding.supporting_data[].caption	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].collected_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
finding.supporting_data[].collected_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].module	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].src_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].target_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].type	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.supporting_data[].value	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.title	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.types[]	✅	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	✅	✅	❌	string
finding.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
finding.xattributes.attack_paths_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.credentials_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.critical_impacts_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.critical_impacts_percentage	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.is_one_click_verify	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
finding.xattributes.min_time_to_finding_hms	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
finding.xattributes.min_time_to_finding_s	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
finding.xattributes.total_impacts_count	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
message	❌	✅	❌	❌	✅	❌	❌	✅	✅	❌	❌	❌	❌	✅	✅	✅	❌	string
metadata.extensions[].name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].uid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.extensions[].version	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.logged_time	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
metadata.processed_time	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
metadata.processed_time_dt	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.product.feature.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	string
metadata.product.name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	string
metadata.product.uid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
metadata.product.version	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
metadata.profiles[]	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.tenant_uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
metadata.uid	❌	❌	❌	❌	✅	❌	❌	❌	✅	✅	✅	❌	❌	❌	✅	✅	❌	string
metadata.version	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
observables[].name	✅	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	✅	string
observables[].type	✅	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	string
observables[].type_id	✅	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	✅	number
observables[].value	✅	❌	✅	❌	✅	✅	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	✅	string
osint[].comment	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].confidence	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	unknown
osint[].confidence_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
osint[].type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
osint[].value	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
osint[].vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
remediation.desc	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
remediation.kb_articles[]	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
remediation.references[]	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].agent_list[].name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.agent_uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.assessed_for_policies	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.assessed_for_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.asset_criticality	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.bios_uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.compliance.cveFindings[].cisaShortDescription	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cisaVulnerabilityName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cveId	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cveYear	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].cvssScore	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	number
resources[].data.compliance.cveFindings[].cvssScoreV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	number
resources[].data.compliance.cveFindings[].firstFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].lastFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].lastScanDate	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].severity	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].severityV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.compliance.cveFindings[].summary	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.created_at	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.critical_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.desc	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.device_type	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.domain	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.domainName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.eidFirstSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.eidLastSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.exploits	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.fqdn	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.has_run_container	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	boolean
resources[].data.host_name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.hostname	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.id	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.image_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.instance_id	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.internet_exposure	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.ip	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.ipAddress	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.ipAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.ip[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.ip_addresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.ipv4	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.is_database_server	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_domain_controller	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_load_balancer	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_mail_server	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_vpn	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.is_waf	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
resources[].data.last_assessed_for_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.last_authenticated_results	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.last_scan_end	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.last_scan_start	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.local_ip	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.mac	❌	❌	❌	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.macAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.mac_address	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.machine_domain	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.malware_kits	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.manufacturer	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.model	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.moderate_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	✅	❌	❌	❌	❌	❌	string
resources[].data.native_type	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.network_id	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.operating_system[]	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].data.os.cpu_bits	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.os.generation	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.os.language	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.os.name	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.os.platform	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.os.type	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.os.type_id	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.os.version	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.os_fingerprints[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.os_names[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.os_version	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.ou	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.platform	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.port	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	mixed
resources[].data.portal_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.product_type_desc	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.protocol	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.provider_unique_id	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.risk_score	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.serialNumber	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.service_provider	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.severe_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.site_name	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.status	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].data.subnet	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].data.systemUUID	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].data.system_manufacturer	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].data.total_vulnerabilities	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].data.tracked	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	boolean
resources[].data.uid	❌	❌	❌	❌	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].data.uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
resources[].desc	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cisaShortDescription	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cisaVulnerabilityName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cveId	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cveYear	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].cvssScore	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	number
resources[].device.compliance.cveFindings[].cvssScoreV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	number
resources[].device.compliance.cveFindings[].firstFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].lastFound	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].lastScanDate	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].severity	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].severityV3	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.compliance.cveFindings[].summary	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.domainName	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.eidFirstSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.eidLastSeen	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.id	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.ipAddress	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.ipAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.macAddresses[]	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.manufacturer	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.model	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.os.generation	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.os.language	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.os.name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.os.platform	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].device.serialNumber	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	string
resources[].hostname	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].ip	❌	❌	❌	✅	❌	❌	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	❌	string
resources[].labels[]	✅	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	✅	❌	❌	✅	❌	string
resources[].last_seen_time	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	✅	❌	❌	❌	❌	❌	timestamp
resources[].mac	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	✅	❌	❌	❌	❌	❌	string
resources[].name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
resources[].os_type	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	✅	❌	string
resources[].owner.account.uid	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
resources[].owner.uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].region	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
resources[].type	✅	✅	❌	✅	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
resources[].type_id	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
resources[].uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
resources[].vendor_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
resources[].vendor_uuid	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	string
risk_score	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	number
severity	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
severity_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
start_time	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	timestamp
start_time_dt	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
state	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
state_id	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
status	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	string
status_id	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
time	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
time_dt	❌	❌	❌	✅	✅	❌	❌	✅	❌	✅	✅	❌	✅	❌	❌	✅	❌	string
timezone_offset	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
type_name	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
type_uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	number
vulnerabilities[].advisory.created_time	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].advisory.created_time_dt	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].advisory.desc	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.modified_time	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].advisory.modified_time_dt	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.references[]	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.related_cves[].uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.related_cwes[].uid	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.src_url	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.title	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].advisory.uid	✅	❌	❌	✅	❌	✅	❌	✅	✅	✅	✅	❌	❌	✅	✅	❌	❌	string
vulnerabilities[].affected_packages[].architecture	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].cpe_name	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].affected_packages[].epoch	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
vulnerabilities[].affected_packages[].fixed_in_version	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].name	✅	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].affected_packages[].package_manager	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].path	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].release	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].remediation.desc	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].type_id	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
vulnerabilities[].affected_packages[].vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].affected_packages[].version	✅	❌	❌	❌	✅	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].category	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.created_time	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].cve.created_time_dt	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	string
vulnerabilities[].cve.cvss[].base_score	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	number
vulnerabilities[].cve.cvss[].metrics[].name	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	❌	string
vulnerabilities[].cve.cvss[].metrics[].value	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	❌	string
vulnerabilities[].cve.cvss[].overall_score	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
vulnerabilities[].cve.cvss[].severity	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
vulnerabilities[].cve.cvss[].vector_string	✅	✅	✅	❌	❌	✅	✅	✅	✅	✅	✅	❌	❌	✅	✅	❌	✅	string
vulnerabilities[].cve.cvss[].vendor_name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.cvss[].version	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	string
vulnerabilities[].cve.desc	❌	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.epss.score	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	string
vulnerabilities[].cve.modified_time	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	timestamp
vulnerabilities[].cve.modified_time_dt	✅	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.product.name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.product.vendor_name	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.references[]	✅	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.related_cwes[].uid	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.title	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.type	❌	❌	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].cve.uid	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅	string
vulnerabilities[].desc	❌	✅	✅	✅	❌	❌	❌	✅	✅	❌	❌	✅	❌	❌	❌	✅	✅	string
vulnerabilities[].first_seen_time	❌	✅	✅	❌	✅	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	timestamp
vulnerabilities[].first_seen_time_dt	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].fix_available	❌	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	✅	❌	boolean
vulnerabilities[].is_exploit_available	❌	❌	✅	✅	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	✅	✅	✅	boolean
vulnerabilities[].is_fix_available	❌	❌	❌	❌	❌	✅	✅	✅	❌	❌	❌	❌	❌	✅	✅	✅	❌	boolean
vulnerabilities[].kb_articles[]	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].last_seen_time	❌	✅	✅	❌	✅	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	timestamp
vulnerabilities[].last_seen_time_dt	❌	❌	❌	❌	✅	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].packages[].name	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
vulnerabilities[].packages[].vendor_name	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].packages[].version	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	✅	❌	string
vulnerabilities[].references[]	✅	❌	✅	✅	❌	❌	✅	❌	✅	❌	❌	❌	❌	✅	✅	✅	✅	string
vulnerabilities[].related_vulnerabilities[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].remediation.desc	❌	❌	❌	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].severity	❌	✅	✅	❌	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	string
vulnerabilities[].title	❌	✅	✅	✅	❌	❌	❌	✅	✅	❌	❌	❌	❌	❌	❌	✅	✅	string
vulnerabilities[].vendor_name	❌	✅	✅	❌	❌	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	✅	✅	string
vulnerabilities[].xattributes.cisa_kev	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
vulnerabilities[].xattributes.context_score	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	number
vulnerabilities[].xattributes.context_score_description	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.downstream_impact_types[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.has_proof	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
vulnerabilities[].xattributes.impact	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.impact_categories[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.known_ransomware_campaign_use	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	boolean
vulnerabilities[].xattributes.op_id	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.portal_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].annotation	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].collected_at	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].command_outputs[].command	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].command_outputs[].output	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].created_at	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.description	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.id	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.name	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].op_id	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].presigned_url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].proof_type	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].proven_entity_labels[]	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].url	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string
vulnerabilities[].xattributes.proofs[].uuid	❌	❌	❌	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌	string

query_scan_findings

Field	Horizon3 NodeZero	Type
activity_id	✅	number
activity_name	✅	string
category_name	✅	string
category_uid	✅	number
class_name	✅	string
class_uid	✅	number
device.first_seen_time	✅	timestamp
device.first_seen_time_dt	✅	string
device.hostname	✅	string
device.ip	✅	string
device.mac	✅	string
device.name	✅	string
device.os.name	✅	string
device.os.type	✅	string
device.os.type_id	✅	number
device.subnet	✅	string
device.type	✅	string
device.type_id	✅	number
device.uid	✅	string
finding_info.attacks[].sub_technique.name	✅	string
finding_info.attacks[].sub_technique.src_url	✅	string
finding_info.attacks[].sub_technique.uid	✅	string
finding_info.attacks[].tactic.name	✅	string
finding_info.attacks[].tactic.src_url	✅	string
finding_info.attacks[].tactic.uid	✅	string
finding_info.attacks[].technique.name	✅	string
finding_info.attacks[].technique.src_url	✅	string
finding_info.attacks[].technique.uid	✅	string
finding_info.first_seen_time	✅	timestamp
finding_info.first_seen_time_dt	✅	string
finding_info.last_seen_time	✅	timestamp
finding_info.last_seen_time_dt	✅	string
finding_info.src_url	✅	string
finding_info.title	✅	string
finding_info.uid	✅	string
finding_info.xattributes.op_id	✅	string
metadata.extensions[].name	✅	string
metadata.extensions[].uid	✅	string
metadata.extensions[].version	✅	string
metadata.product.name	✅	string
metadata.product.vendor_name	✅	string
metadata.profiles[]	✅	string
metadata.version	✅	string
resources[].data.port	✅	number
resources[].data.protocol	✅	string
resources[].ip	✅	string
resources[].name	✅	string
resources[].role	✅	string
resources[].role_id	✅	number
resources[].type	✅	string
resources[].uid	✅	string
severity	✅	string
severity_id	✅	number
time	✅	number
time_dt	✅	string
timezone_offset	✅	number
type_name	✅	string
type_uid	✅	number
vulnerabilities[].advisory.uid	✅	string
vulnerabilities[].category	✅	string
vulnerabilities[].cve.cvss[].base_score	✅	number
vulnerabilities[].cve.cvss[].overall_score	✅	number
vulnerabilities[].cve.cvss[].vendor_name	✅	string
vulnerabilities[].cve.cvss[].version	✅	string
vulnerabilities[].cve.uid	✅	string
vulnerabilities[].cwe.uid	✅	string
vulnerabilities[].desc	✅	string
vulnerabilities[].is_exploit_available	✅	boolean
vulnerabilities[].references[]	✅	string
vulnerabilities[].related_vulnerabilities[]	✅	string
vulnerabilities[].remediation.desc	✅	string
vulnerabilities[].title	✅	string
vulnerabilities[].xattributes.cisa_kev	✅	boolean
vulnerabilities[].xattributes.context_score	✅	number
vulnerabilities[].xattributes.context_score_description	✅	string
vulnerabilities[].xattributes.downstream_impact_types[]	✅	string
vulnerabilities[].xattributes.has_proof	✅	boolean
vulnerabilities[].xattributes.impact	✅	string
vulnerabilities[].xattributes.impact_categories[]	✅	string
vulnerabilities[].xattributes.known_ransomware_campaign_use	✅	boolean
vulnerabilities[].xattributes.proofs[].annotation	✅	string
vulnerabilities[].xattributes.proofs[].collected_at	✅	string
vulnerabilities[].xattributes.proofs[].command_outputs[].command	✅	string
vulnerabilities[].xattributes.proofs[].command_outputs[].output	✅	string
vulnerabilities[].xattributes.proofs[].created_at	✅	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.description	✅	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.id	✅	string
vulnerabilities[].xattributes.proofs[].found_by_module_meta.name	✅	string
vulnerabilities[].xattributes.proofs[].op_id	✅	string
vulnerabilities[].xattributes.proofs[].proof_type	✅	string
vulnerabilities[].xattributes.proofs[].proven_entity_labels[]	✅	string
vulnerabilities[].xattributes.proofs[].uuid	✅	string

query_scans

Field	Horizon3 NodeZero	Qualys VMDR	Tanium VM	Tenable SC	Tenable VM	[MOCK] Tanium Vulnerability Management	Type
creation_time	✅	❌	✅	✅	✅	✅	timestamp
credentials[].description	❌	❌	❌	✅	❌	❌	string
credentials[].id	❌	❌	❌	✅	❌	❌	string
credentials[].name	❌	❌	❌	✅	❌	❌	string
credentials[].type	❌	❌	❌	✅	❌	❌	string
credentials[].uuid	❌	❌	❌	✅	❌	❌	string
ip_list	❌	❌	❌	✅	❌	❌	string
last_modified_time	✅	❌	✅	✅	✅	✅	timestamp
name	✅	✅	✅	✅	✅	✅	string
owner.firstname	❌	❌	❌	✅	❌	❌	string
owner.lastname	❌	❌	❌	✅	❌	❌	string
owner.uid	❌	✅	❌	✅	✅	❌	string
owner.username	❌	❌	❌	✅	❌	❌	string
owner.uuid	❌	❌	❌	✅	❌	❌	string
owner_group.id	❌	❌	❌	✅	❌	❌	string
owner_group.name	❌	❌	❌	✅	❌	❌	string
policy.id	❌	❌	❌	✅	❌	❌	string
policy.name	❌	❌	❌	✅	❌	❌	string
policy.uuid	❌	❌	❌	✅	❌	❌	string
repository.dataFormat	❌	❌	❌	✅	❌	❌	string
repository.description	❌	❌	❌	✅	❌	❌	string
repository.id	❌	❌	❌	✅	❌	❌	string
repository.name	❌	❌	❌	✅	❌	❌	string
repository.type	❌	❌	❌	✅	❌	❌	string
repository.uuid	❌	❌	❌	✅	❌	❌	string
scan_type	❌	❌	❌	✅	❌	❌	string
scan_uuid	❌	❌	❌	✅	❌	❌	string
schedule.days[]	❌	✅	❌	❌	❌	❌	string
schedule.frequency	❌	✅	✅	❌	✅	✅	string
schedule.repeat_interval	❌	✅	✅	❌	✅	✅	number
schedule.start_datetime	❌	❌	✅	❌	❌	✅	string
schedule.time	❌	✅	✅	❌	✅	✅	string
schedule_source.enabled	❌	❌	❌	✅	❌	❌	string
schedule_source.id	❌	❌	❌	✅	❌	❌	string
schedule_source.nextRun	❌	❌	❌	✅	❌	❌	number
schedule_source.objectType	❌	❌	❌	✅	❌	❌	string
schedule_source.repeatRule	❌	❌	❌	✅	❌	❌	string
schedule_source.start	❌	❌	❌	✅	❌	❌	string
schedule_source.type	❌	❌	❌	✅	❌	❌	string
status	❌	❌	❌	✅	✅	❌	string
uid	✅	✅	✅	✅	✅	✅	string

update_asset

Field	Nucleus VM	Type
asset_info.cloud_provider	✅	string
asset_info.container_info.container_id	✅	string
asset_info.container_info.created_at	✅	string
asset_info.container_info.image.name	✅	string
asset_info.container_info.runtime	✅	string
asset_info.container_info.state	✅	string
asset_location	✅	string
asset_name_secondary[]	✅	string
image_tags[]	✅	string
ip_address	✅	string
ip_address_secondary[]	✅	string
mac_address	✅	string
operating_system_name	✅	string
operating_system_version	✅	string

update_finding

Field	Nucleus VM	Type
comment	✅	string
due_date	✅	string
finding_severity	✅	string
finding_status	✅	string

Vulnerabilities Supported FieldsCopyCopy for LLMCopy page as Markdown for LLMsView as MarkdownOpen this page as MarkdownOpen in ChatGPTGet insights from ChatGPTOpen in ClaudeGet insights from Claude

create_asset

create_findings

get_scan_activities

get_scan_activity

query_assets

query_findings

query_scan_findings

query_scans

update_asset

update_finding

Was this helpful?

Vulnerabilities Supported Fields
Copy for LLM
Copy page as Markdown for LLMs
View as Markdown
Open this page as Markdown
Open in ChatGPT
Get insights from ChatGPT
Open in Claude
Get insights from Claude