Vulnerabilities Supported Fields

This document shows the fields supported by each provider and operation.

create_asset

FieldNucleus Vulnerability ManagementType
asset_info.cloud_providerstring
asset_info.container_info.container_idstring
asset_info.container_info.created_atstring
asset_info.container_info.image.namestring
asset_info.container_info.runtimestring
asset_info.container_info.statestring
asset_locationstring
asset_namestring
asset_name_secondary[]string
asset_typestring
image_tags[]string
ip_addressstring
ip_address_secondary[]string
mac_addressstring
operating_system_namestring
operating_system_versionstring

create_findings

FieldNucleus Vulnerability ManagementType
custom_finding_descriptionstring
custom_finding_namestring
custom_finding_recommendationstring
custom_finding_severitystring
custom_finding_typestring
finding_additional_informationstring
finding_discoveredstring
host_idnumber

get_scan_activity

FieldQualys VMDRTenable Vulnerability ManagementType
activitystring
activity_idnumber
actor.user.uidstring
category_namestring
category_uidnumber
categry_namestring
class_namestring
class_uidnumber
command_uidstring
durationnumber
end_timetimestamp
metadata.loggers[].log_namestring
metadata.loggers[].log_providerstring
metadata.product.vendor_namestring
metadata.uidstring
metadata.versionstring
num_detectionsnumber
num_hostsnumber
num_resolutionsnumber
policy.namestring
policy.uidstring
scan.namestring
scan.targets[]string
scan.type_idnumber
scan.uidstring
schedule_uidstring
severitystring
severity_idnumber
start_timetimestamp
status_detailstring
timenumber
totalnumber
type_namestring
type_uidnumber

query_assets

FieldCrowdStrike SpotlightNucleus Vulnerability ManagementQualys VMDRRapid7 InsightVM CloudTanium Vulnerability ManagementTenable Vulnerability ManagementType
activity_idnumber
activity_namestring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
cloud.account.typestring
cloud.account.type_idnumber
cloud.account.uidstring
cloud.providerstring
cloud.regionstring
cloud.zonestring
countnumber
device.descstring
device.domainstring
device.first_seen_timetimestamp
device.groups[].namestring
device.groups[].typestring
device.groups[].uidstring
device.hostnamestring
device.hw_info.bios_manufacturerstring
device.hw_info.bios_uidstring
device.hw_info.bios_verstring
device.hw_info.chassisstring
device.hw_info.cpu_typestring
device.hw_info.serial_numberstring
device.image.namestring
device.image.tagstring
device.image.uidstring
device.instance_uidstring
device.ipstring
device.ip_addresses[]string
device.last_seen_timetimestamp
device.macmixed
device.mac_addresses[]string
device.modified_timetimestamp
device.namestring
device.netbios_names[]string
device.network_interfaces[].hostnamestring
device.network_interfaces[].ipstring
device.network_interfaces[].ip_addresses[]string
device.network_interfaces[].macstring
device.network_interfaces[].mac_addresses[]string
device.network_interfaces[].namestring
device.network_interfaces[].type_idnumber
device.network_statusstring
device.network_status_idnumber
device.org.namestring
device.org.uidstring
device.os.buildstring
device.os.namestring
device.os.typestring
device.os.type_idnumber
device.os.versionstring
device.regionmixed
device.risk_level_idnumber
device.risk_scorenumber
device.subnetstring
device.subnet_uidstring
device.sw_info[].cpe_namestring
device.sw_info[].namestring
device.sw_info[].vendor_namestring
device.sw_info[].versionstring
device.typestring
device.type_idnumber
device.uidstring
device.vpc_uidstring
device.zonestring
durationnumber
messagestring
metadata.labels[]string
metadata.loggers[].logged_timetimestamp
metadata.loggers[].namemixed
metadata.loggers[].product.vendor_namestring
metadata.loggers[].uidunknown
metadata.loggers[].versionstring
metadata.product.namemixed
metadata.product.uidunknown
metadata.product.vendor_namestring
metadata.product.versionstring
metadata.versionstring
observables[].namestring
observables[].typestring
observables[].type_idnumber
observables[].valuestring
result.activity_idnumber
result.activity_namestring
result.category_namestring
result.category_uidnumber
result.class_uidnumber
result.device.descstring
result.device.first_seen_timetimestamp
result.device.hostnamestring
result.device.hw_info.bios_manufacturerstring
result.device.hw_info.bios_verstring
result.device.hw_info.chassisstring
result.device.hw_info.serial_numberstring
result.device.instance_uidstring
result.device.ipstring
result.device.last_seen_timetimestamp
result.device.macstring
result.device.modified_timetimestamp
result.device.namestring
result.device.network_statusstring
result.device.network_status_idnumber
result.device.org.namestring
result.device.org.uidstring
result.device.os.namestring
result.device.os.typestring
result.device.os.type_idnumber
result.device.os.versionstring
result.device.typestring
result.device.type_idnumber
result.device.uidstring
result.device.zonestring
result.messagestring
result.metadata.labels[]string
result.metadata.loggers[].namestring
result.metadata.loggers[].versionstring
result.metadata.product.namestring
result.metadata.product.vendor_namestring
result.metadata.versionstring
result.raw_datastring
result.severitystring
result.severity_idnumber
result.statusstring
result.status_idnumber
result.timenumber
result.type_namestring
result.type_uidnumber
result.unmapped.connection_mac_addressstring
result.unmapped.default_gateway_ipstring
result.unmapped.deployment_typestring
result.unmapped.kernel_versionstring
result.unmapped.local_ipstring
result.unmapped.provision_statusstring
severitystring
severity_idnumber
statusstring
status_idnumber
timenumber
type_namestring
type_uidnumber

query_findings

FieldCrowdStrike SpotlightNucleus Vulnerability ManagementQualys VMDRRapid7 InsightVM CloudTanium Vulnerability ManagementTenable Vulnerability ManagementType
activity_idnumber
activity_namestring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
cloud.account.namestring
cloud.account.uidstring
cloud.providerstring
cloud.regionstring
confidencestring
confidence_idnumber
countnumber
end_timetimestamp
finding.created_timetimestamp
finding.created_time_dtstring
finding.descstring
finding.first_seen_timetimestamp
finding.first_seen_time_dtstring
finding.last_seen_timetimestamp
finding.last_seen_time_dtstring
finding.modified_timetimestamp
finding.modified_time_dtstring
finding.product_uidstring
finding.remediation.descstring
finding.scan_datenumber
finding.titlestring
finding.uidstring
messagestring
metadata.logged_timetimestamp
metadata.processed_timetimestamp
metadata.processed_time_dtstring
metadata.product.namestring
metadata.product.vendor_namestring
metadata.product.versionstring
metadata.uidstring
metadata.versionstring
osint[].commentstring
osint[].confidence_idnumber
osint[].type_idnumber
osint[].valuestring
osint[].vendor_namestring
resources[].agent_list[].namestring
resources[].data.agent_uuidstring
resources[].data.assessed_for_policiesboolean
resources[].data.assessed_for_vulnerabilitiesboolean
resources[].data.asset_criticalitystring
resources[].data.bios_uuidstring
resources[].data.critical_vulnerabilitiesnumber
resources[].data.descstring
resources[].data.device_typestring
resources[].data.domainstring
resources[].data.exploitsnumber
resources[].data.fqdnstring
resources[].data.has_run_containerboolean
resources[].data.hostnamestring
resources[].data.instance_idstring
resources[].data.internet_exposurestring
resources[].data.ipstring
resources[].data.ip[]string
resources[].data.ipv4string
resources[].data.last_assessed_for_vulnerabilitiesstring
resources[].data.last_authenticated_resultsstring
resources[].data.last_scan_endstring
resources[].data.last_scan_startstring
resources[].data.local_ipstring
resources[].data.macstring
resources[].data.mac_addressstring
resources[].data.machine_domainstring
resources[].data.malware_kitsnumber
resources[].data.moderate_vulnerabilitiesnumber
resources[].data.namestring
resources[].data.network_idstring
resources[].data.operating_system[]string
resources[].data.os.cpu_bitsnumber
resources[].data.os.namestring
resources[].data.os.typestring
resources[].data.os.type_idnumber
resources[].data.os.versionstring
resources[].data.os_versionstring
resources[].data.oustring
resources[].data.platformstring
resources[].data.portstring
resources[].data.product_type_descstring
resources[].data.risk_scorenumber
resources[].data.service_providerstring
resources[].data.site_namestring
resources[].data.system_manufacturerstring
resources[].data.trackedboolean
resources[].data.uidstring
resources[].data.uuidstring
resources[].device.domainNamestring
resources[].device.eidFirstSeenstring
resources[].device.eidLastSeenstring
resources[].device.idstring
resources[].device.ipAddressstring
resources[].device.ipAddresses[]string
resources[].device.macAddresses[]string
resources[].device.manufacturerstring
resources[].device.modelstring
resources[].device.serialNumberstring
resources[].labels[]string
resources[].namestring
resources[].owner.account.uidstring
resources[].typestring
resources[].uidstring
severitystring
severity_idnumber
start_timetimestamp
statestring
state_idnumber
statusstring
timenumber
time_dtstring
type_namestring
type_uidnumber
vulnerabilities[].affected_packages[].cpe_namestring
vulnerabilities[].affected_packages[].namestring
vulnerabilities[].affected_packages[].vendor_namestring
vulnerabilities[].affected_packages[].versionstring
vulnerabilities[].cve.cvss[].base_scorenumber
vulnerabilities[].cve.cvss[].metrics[].namestring
vulnerabilities[].cve.cvss[].metrics[].valuestring
vulnerabilities[].cve.cvss[].severitystring
vulnerabilities[].cve.cvss[].vector_stringstring
vulnerabilities[].cve.cvss[].versionstring
vulnerabilities[].cve.descstring
vulnerabilities[].cve.product.namestring
vulnerabilities[].cve.product.vendor_namestring
vulnerabilities[].cve.references[]string
vulnerabilities[].cve.titlestring
vulnerabilities[].cve.typestring
vulnerabilities[].cve.uidstring
vulnerabilities[].descstring
vulnerabilities[].first_seen_timetimestamp
vulnerabilities[].first_seen_time_dtstring
vulnerabilities[].fix_availableboolean
vulnerabilities[].is_exploit_availableboolean
vulnerabilities[].is_fix_availableboolean
vulnerabilities[].last_seen_timetimestamp
vulnerabilities[].last_seen_time_dtstring
vulnerabilities[].references[]string
vulnerabilities[].remediation.descstring
vulnerabilities[].severitystring
vulnerabilities[].titlestring
vulnerabilities[].vendor_namestring

query_scans

FieldQualys VMDRTenable Vulnerability ManagementType
creation_timetimestamp
last_modified_timetimestamp
namestring
owner.uidstring
schedule.days[]string
schedule.frequencystring
schedule.repeat_intervalnumber
schedule.timestring
statusstring
uidstring

update_asset

FieldNucleus Vulnerability ManagementType
asset_info.cloud_providerstring
asset_info.container_info.container_idstring
asset_info.container_info.created_atstring
asset_info.container_info.image.namestring
asset_info.container_info.runtimestring
asset_info.container_info.statestring
asset_locationstring
asset_name_secondary[]string
image_tags[]string
ip_addressstring
ip_address_secondary[]string
mac_addressstring
operating_system_namestring
operating_system_versionstring

update_finding

FieldNucleus Vulnerability ManagementType
commentstring
due_datestring
finding_severitystring
finding_statusstring