Vulnerabilities Supported Fields
This document shows the fields supported by each provider and operation.
- create_asset
- create_findings
- get_scan_activity
- query_assets
- query_findings
- query_scans
- update_asset
- update_finding
create_asset
Field | Nucleus Vulnerability Management | Type |
---|---|---|
asset_info.cloud_provider | ✅ | string |
asset_info.container_info.container_id | ✅ | string |
asset_info.container_info.created_at | ✅ | string |
asset_info.container_info.image.name | ✅ | string |
asset_info.container_info.runtime | ✅ | string |
asset_info.container_info.state | ✅ | string |
asset_location | ✅ | string |
asset_name | ✅ | string |
asset_name_secondary[] | ✅ | string |
asset_type | ✅ | string |
image_tags[] | ✅ | string |
ip_address | ✅ | string |
ip_address_secondary[] | ✅ | string |
mac_address | ✅ | string |
operating_system_name | ✅ | string |
operating_system_version | ✅ | string |
create_findings
Field | Nucleus Vulnerability Management | Type |
---|---|---|
custom_finding_description | ✅ | string |
custom_finding_name | ✅ | string |
custom_finding_recommendation | ✅ | string |
custom_finding_severity | ✅ | string |
custom_finding_type | ✅ | string |
finding_additional_information | ✅ | string |
finding_discovered | ✅ | string |
host_id | ✅ | number |
get_scan_activity
Field | Qualys VMDR | Tenable Vulnerability Management | Type |
---|---|---|---|
activity | ✅ | ✅ | string |
activity_id | ✅ | ✅ | number |
actor.user.uid | ✅ | ✅ | string |
category_name | ❌ | ✅ | string |
category_uid | ✅ | ✅ | number |
categry_name | ✅ | ❌ | string |
class_name | ✅ | ❌ | string |
class_uid | ✅ | ✅ | number |
command_uid | ✅ | ✅ | string |
duration | ✅ | ❌ | number |
end_time | ✅ | ✅ | timestamp |
metadata.loggers[].log_name | ❌ | ✅ | string |
metadata.loggers[].log_provider | ❌ | ✅ | string |
metadata.product.vendor_name | ✅ | ✅ | string |
metadata.uid | ❌ | ✅ | string |
metadata.version | ✅ | ✅ | string |
num_detections | ✅ | ✅ | number |
num_hosts | ✅ | ❌ | number |
num_resolutions | ❌ | ✅ | number |
policy.name | ✅ | ✅ | string |
policy.uid | ✅ | ❌ | string |
scan.name | ❌ | ✅ | string |
scan.targets[] | ✅ | ✅ | string |
scan.type_id | ✅ | ❌ | number |
scan.uid | ❌ | ✅ | string |
schedule_uid | ❌ | ✅ | string |
severity | ✅ | ✅ | string |
severity_id | ✅ | ✅ | number |
start_time | ✅ | ✅ | timestamp |
status_detail | ❌ | ✅ | string |
time | ✅ | ✅ | number |
total | ❌ | ✅ | number |
type_name | ✅ | ✅ | string |
type_uid | ✅ | ✅ | number |
query_assets
Field | CrowdStrike Spotlight | Nucleus Vulnerability Management | Qualys VMDR | Rapid7 InsightVM Cloud | Tanium Vulnerability Management | Tenable Vulnerability Management | Type |
---|---|---|---|---|---|---|---|
activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
activity_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
category_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
class_name | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
cloud.account.type | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
cloud.account.type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number |
cloud.account.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
cloud.provider | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
cloud.region | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
cloud.zone | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
count | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
device.desc | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.domain | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
device.first_seen_time | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | timestamp |
device.groups[].name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
device.groups[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
device.groups[].uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
device.hostname | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.hw_info.bios_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.hw_info.cpu_type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
device.hw_info.serial_number | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
device.image.name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.image.tag | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.image.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
device.instance_uid | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
device.ip | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
device.ip_addresses[] | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | string |
device.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp |
device.mac | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | mixed |
device.mac_addresses[] | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
device.modified_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
device.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.netbios_names[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].hostname | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].ip | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].ip_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].mac_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.network_interfaces[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number |
device.network_status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.network_status_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
device.org.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.org.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.os.build | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.os.name | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
device.os.type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
device.os.type_id | ✅ | ❌ | ❌ | ✅ | ✅ | ✅ | number |
device.os.version | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | string |
device.region | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | mixed |
device.risk_level_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
device.risk_score | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | number |
device.subnet | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.subnet_uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
device.sw_info[].cpe_name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
device.sw_info[].name | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | string |
device.sw_info[].vendor_name | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | string |
device.sw_info[].version | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | string |
device.type | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | string |
device.type_id | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | number |
device.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
device.vpc_uid | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
device.zone | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
duration | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | number |
message | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
metadata.labels[] | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
metadata.loggers[].logged_time | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | timestamp |
metadata.loggers[].name | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | mixed |
metadata.loggers[].product.vendor_name | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | string |
metadata.loggers[].uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | unknown |
metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
metadata.product.name | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | mixed |
metadata.product.uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | unknown |
metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
metadata.product.version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
observables[].name | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
observables[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
observables[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number |
observables[].value | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
result.activity_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.activity_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.category_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.category_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.class_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.device.desc | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.first_seen_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
result.device.hostname | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.hw_info.serial_number | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.instance_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.ip | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.last_seen_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
result.device.mac | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.modified_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
result.device.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.network_status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.network_status_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.device.org.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.org.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.os.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.os.type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.os.type_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.device.os.version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.type_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.device.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.device.zone | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.message | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.metadata.labels[] | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.metadata.loggers[].name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.metadata.product.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.metadata.product.vendor_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.metadata.version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.raw_data | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.severity | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.severity_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.status_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.type_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.type_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
result.unmapped.connection_mac_address | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.unmapped.default_gateway_ip | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.unmapped.deployment_type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.unmapped.kernel_version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.unmapped.local_ip | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
result.unmapped.provision_status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
severity | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
status | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
status_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
type_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
query_findings
Field | CrowdStrike Spotlight | Nucleus Vulnerability Management | Qualys VMDR | Rapid7 InsightVM Cloud | Tanium Vulnerability Management | Tenable Vulnerability Management | Type |
---|---|---|---|---|---|---|---|
activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
activity_name | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
category_name | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
class_name | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
cloud.account.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
cloud.account.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
cloud.provider | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
cloud.region | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
confidence | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
confidence_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
count | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | number |
end_time | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | timestamp |
finding.created_time | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | timestamp |
finding.created_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
finding.desc | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
finding.first_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp |
finding.first_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
finding.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp |
finding.last_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
finding.modified_time | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | timestamp |
finding.modified_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
finding.product_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
finding.remediation.desc | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | string |
finding.scan_date | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number |
finding.title | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
finding.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
message | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | string |
metadata.logged_time | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | timestamp |
metadata.processed_time | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | timestamp |
metadata.processed_time_dt | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
metadata.product.name | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
metadata.product.version | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
metadata.uid | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
osint[].comment | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
osint[].confidence_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | number |
osint[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | number |
osint[].value | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
osint[].vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].agent_list[].name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.agent_uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].data.assessed_for_policies | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | boolean |
resources[].data.assessed_for_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | boolean |
resources[].data.asset_criticality | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.bios_uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].data.critical_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.desc | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].data.device_type | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].data.domain | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].data.exploits | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.fqdn | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
resources[].data.has_run_container | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | boolean |
resources[].data.hostname | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | string |
resources[].data.instance_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.internet_exposure | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.ip | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.ip[] | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].data.ipv4 | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].data.last_assessed_for_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.last_authenticated_results | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].data.last_scan_end | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.last_scan_start | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.local_ip | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.mac | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.mac_address | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].data.machine_domain | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.malware_kits | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.moderate_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].data.network_id | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
resources[].data.operating_system[] | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
resources[].data.os.cpu_bits | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.os.name | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | string |
resources[].data.os.type | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.os.type_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.os.version | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].data.os_version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.ou | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.platform | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.port | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.product_type_desc | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.risk_score | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number |
resources[].data.service_provider | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.site_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.system_manufacturer | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].data.tracked | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | boolean |
resources[].data.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].data.uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
resources[].device.domainName | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.eidFirstSeen | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.eidLastSeen | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.id | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.ipAddress | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.ipAddresses[] | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.macAddresses[] | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.manufacturer | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.model | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].device.serialNumber | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
resources[].labels[] | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
resources[].name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
resources[].owner.account.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
resources[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
resources[].uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
severity | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
start_time | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | timestamp |
state | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
state_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
type_name | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
vulnerabilities[].affected_packages[].cpe_name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
vulnerabilities[].affected_packages[].name | ❌ | ✅ | ✅ | ❌ | ❌ | ✅ | string |
vulnerabilities[].affected_packages[].vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].affected_packages[].version | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
vulnerabilities[].cve.cvss[].base_score | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | number |
vulnerabilities[].cve.cvss[].metrics[].name | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
vulnerabilities[].cve.cvss[].metrics[].value | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
vulnerabilities[].cve.cvss[].severity | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.cvss[].vector_string | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
vulnerabilities[].cve.cvss[].version | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | string |
vulnerabilities[].cve.desc | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.product.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.product.vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.references[] | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.title | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].cve.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
vulnerabilities[].desc | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | string |
vulnerabilities[].first_seen_time | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | timestamp |
vulnerabilities[].first_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].fix_available | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | boolean |
vulnerabilities[].is_exploit_available | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | boolean |
vulnerabilities[].is_fix_available | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | boolean |
vulnerabilities[].last_seen_time | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | timestamp |
vulnerabilities[].last_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
vulnerabilities[].references[] | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | string |
vulnerabilities[].remediation.desc | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | string |
vulnerabilities[].severity | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | string |
vulnerabilities[].title | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | string |
vulnerabilities[].vendor_name | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
query_scans
Field | Qualys VMDR | Tenable Vulnerability Management | Type |
---|---|---|---|
creation_time | ❌ | ✅ | timestamp |
last_modified_time | ❌ | ✅ | timestamp |
name | ✅ | ✅ | string |
owner.uid | ✅ | ✅ | string |
schedule.days[] | ✅ | ❌ | string |
schedule.frequency | ✅ | ✅ | string |
schedule.repeat_interval | ✅ | ✅ | number |
schedule.time | ✅ | ✅ | string |
status | ❌ | ✅ | string |
uid | ✅ | ✅ | string |
update_asset
Field | Nucleus Vulnerability Management | Type |
---|---|---|
asset_info.cloud_provider | ✅ | string |
asset_info.container_info.container_id | ✅ | string |
asset_info.container_info.created_at | ✅ | string |
asset_info.container_info.image.name | ✅ | string |
asset_info.container_info.runtime | ✅ | string |
asset_info.container_info.state | ✅ | string |
asset_location | ✅ | string |
asset_name_secondary[] | ✅ | string |
image_tags[] | ✅ | string |
ip_address | ✅ | string |
ip_address_secondary[] | ✅ | string |
mac_address | ✅ | string |
operating_system_name | ✅ | string |
operating_system_version | ✅ | string |
update_finding
Field | Nucleus Vulnerability Management | Type |
---|---|---|
comment | ✅ | string |
due_date | ✅ | string |
finding_severity | ✅ | string |
finding_status | ✅ | string |