# Vulnerabilities Supported Fields This document shows the fields supported by each provider and operation. - [create_asset](#create_asset) - [create_findings](#create_findings) - [get_scan_activity](#get_scan_activity) - [query_assets](#query_assets) - [query_findings](#query_findings) - [query_scans](#query_scans) - [update_asset](#update_asset) - [update_finding](#update_finding) ## create_asset | Field | Nucleus VM | Type | | --- | --- | --- | | asset_info.cloud_provider | ✅ | string | | asset_info.container_info.container_id | ✅ | string | | asset_info.container_info.created_at | ✅ | string | | asset_info.container_info.image.name | ✅ | string | | asset_info.container_info.runtime | ✅ | string | | asset_info.container_info.state | ✅ | string | | asset_location | ✅ | string | | asset_name | ✅ | string | | asset_name_secondary[] | ✅ | string | | asset_type | ✅ | string | | image_tags[] | ✅ | string | | ip_address | ✅ | string | | ip_address_secondary[] | ✅ | string | | mac_address | ✅ | string | | operating_system_name | ✅ | string | | operating_system_version | ✅ | string | ## create_findings | Field | Nucleus VM | Type | | --- | --- | --- | | custom_finding_description | ✅ | string | | custom_finding_name | ✅ | string | | custom_finding_recommendation | ✅ | string | | custom_finding_severity | ✅ | string | | custom_finding_type | ✅ | string | | finding_additional_information | ✅ | string | | finding_discovered | ✅ | string | | host_id | ✅ | number | ## get_scan_activity | Field | Qualys VMDR | Tenable VM | Type | | --- | --- | --- | --- | | activity | ✅ | ✅ | string | | activity_id | ✅ | ✅ | number | | actor.user.uid | ✅ | ✅ | string | | category_name | ✅ | ✅ | string | | category_uid | ✅ | ✅ | number | | class_name | ✅ | ✅ | string | | class_uid | ✅ | ✅ | number | | command_uid | ✅ | ✅ | string | | duration | ✅ | ❌ | number | | end_time | ✅ | ✅ | timestamp | | metadata.loggers[].log_name | ❌ | ✅ | string | | metadata.loggers[].log_provider | ❌ | ✅ | string | | metadata.product.vendor_name | ✅ | ✅ | string | | metadata.uid | ❌ | ✅ | string | | metadata.version | ✅ | ✅ | string | | num_detections | ✅ | ✅ | number | | num_hosts | ✅ | ❌ | number | | num_resolutions | ❌ | ✅ | number | | policy.name | ✅ | ✅ | string | | policy.uid | ✅ | ❌ | string | | scan.name | ❌ | ✅ | string | | scan.targets[] | ✅ | ✅ | string | | scan.type_id | ✅ | ❌ | number | | scan.uid | ❌ | ✅ | string | | schedule_uid | ❌ | ✅ | string | | severity | ✅ | ✅ | string | | severity_id | ✅ | ✅ | number | | start_time | ✅ | ✅ | timestamp | | status_detail | ❌ | ✅ | string | | time | ✅ | ✅ | number | | total | ❌ | ✅ | number | | type_name | ✅ | ✅ | string | | type_uid | ✅ | ✅ | number | ## query_assets | Field | CrowdStrike Falcon® Spotlight | Nucleus VM | Qualys VMDR | Rapid7 InsightVM | ServiceNow Vulnerability Response | Tanium VM | Tenable VM | [Mock] CrowdStrike Falcon® Spotlight | Type | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | activity_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | category_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | class_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | cloud.account.type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | cloud.account.type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | number | | cloud.account.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | cloud.provider | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | cloud.region | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | cloud.zone | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | count | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | device.desc | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.domain | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | device.first_seen_time | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | timestamp | | device.groups[].name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | device.groups[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | device.groups[].uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | device.hostname | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.hw_info.bios_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.hw_info.cpu_cores | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | number | | device.hw_info.cpu_type | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.hw_info.serial_number | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | string | | device.image.name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.image.tag | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.image.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.instance_uid | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | string | | device.ip | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | device.ip_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string | | device.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp | | device.mac | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | mixed | | device.mac_addresses[] | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.modified_time | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | timestamp | | device.name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.netbios_names[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].hostname | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].ip | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].ip_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].mac_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | number | | device.network_status | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | string | | device.network_status_id | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | number | | device.org.name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.org.uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.os.build | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.os.name | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | device.os.type | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | string | | device.os.type_id | ✅ | ❌ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | device.os.version | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | string | | device.region | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | mixed | | device.risk_level_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | device.risk_score | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | device.subnet | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.subnet_uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | device.sw_info[].cpe_name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.sw_info[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string | | device.sw_info[].vendor_name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string | | device.sw_info[].version | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string | | device.type | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string | | device.type_id | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | device.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | device.vpc_uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.zone | ✅ | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | duration | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number | | message | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | metadata.labels[] | ✅ | ❌ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | string | | metadata.loggers[].logged_time | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | timestamp | | metadata.loggers[].name | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | mixed | | metadata.loggers[].product.vendor_name | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | metadata.loggers[].uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | unknown | | metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | metadata.product.name | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | mixed | | metadata.product.uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | unknown | | metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | metadata.product.version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | network_interfaces[].type | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | network_interfaces[].uid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | observables[].name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | observables[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | observables[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | number | | observables[].value | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | result.activity_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.activity_name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.category_name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.category_uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.class_uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.device.desc | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.first_seen_time | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | timestamp | | result.device.hostname | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.hw_info.serial_number | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.instance_uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.ip | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.last_seen_time | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | timestamp | | result.device.mac | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.modified_time | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | timestamp | | result.device.name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.network_status | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.network_status_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.device.org.name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.org.uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.os.name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.os.type | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.os.type_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.device.os.version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.type | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.type_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.device.uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.device.zone | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.message | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.metadata.labels[] | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.metadata.loggers[].name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.metadata.product.name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.metadata.product.vendor_name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.metadata.version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.raw_data | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.severity | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.severity_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.status | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.status_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.time | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.type_name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.type_uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | number | | result.unmapped.connection_mac_address | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.unmapped.default_gateway_ip | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.unmapped.deployment_type | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.unmapped.kernel_version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.unmapped.local_ip | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | result.unmapped.provision_status | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | severity | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | string | | severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | status | ✅ | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | status_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | type_name | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | string | | type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | ## query_findings | Field | CrowdStrike Falcon® Spotlight | Nucleus VM | Qualys VMDR | Rapid7 InsightVM | ServiceNow Vulnerability Response | Tanium VM | Tenable VM | [Mock] CrowdStrike Falcon® Spotlight | Type | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | activity_name | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | category_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | class_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | cloud.account.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | cloud.account.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | cloud.provider | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | cloud.region | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | cloud.resource.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | cloud.resource.type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | cloud.resource.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | confidence | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | confidence_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | count | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | end_time | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | timestamp | | finding.created_time | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp | | finding.created_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | finding.desc | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | finding.first_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp | | finding.first_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | finding.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp | | finding.last_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | finding.modified_time | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | timestamp | | finding.modified_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | finding.product_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | finding.remediation.desc | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | ✅ | string | | finding.scan_date | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number | | finding.title | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | finding.types[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | finding.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | message | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | metadata.logged_time | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp | | metadata.processed_time | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | timestamp | | metadata.processed_time_dt | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | metadata.product.name | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | metadata.product.version | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | metadata.uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | osint[].comment | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | osint[].confidence_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number | | osint[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number | | osint[].value | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | osint[].vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].agent_list[].name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.agent_uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.assessed_for_policies | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | boolean | | resources[].data.assessed_for_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | boolean | | resources[].data.asset_criticality | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.bios_uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.critical_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.desc | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.device_type | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.domain | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.exploits | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.fqdn | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.has_run_container | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | boolean | | resources[].data.hostname | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.instance_id | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.internet_exposure | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.ip | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.ip[] | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.ipv4 | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.last_assessed_for_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.last_authenticated_results | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.last_scan_end | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.last_scan_start | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.local_ip | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.mac | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.mac_address | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.machine_domain | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.malware_kits | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.moderate_vulnerabilities | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.network_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.operating_system[] | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | resources[].data.os.cpu_bits | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.os.name | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.os.type | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.os.type_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.os.version | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.os_version | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.ou | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.platform | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.port | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.product_type_desc | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.risk_score | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number | | resources[].data.service_provider | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.site_name | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.system_manufacturer | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].data.tracked | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | boolean | | resources[].data.uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].data.uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | resources[].device.domainName | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.eidFirstSeen | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.eidLastSeen | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.id | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.ipAddress | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.ipAddresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.macAddresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.manufacturer | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.model | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].device.serialNumber | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string | | resources[].labels[] | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | resources[].name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | resources[].owner.account.uid | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | resources[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | resources[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number | | resources[].uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | severity | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | start_time | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | timestamp | | state | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | string | | state_id | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | number | | status | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | string | | time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | type_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | vulnerabilities[].affected_packages[].cpe_name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].affected_packages[].name | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].affected_packages[].type_id | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number | | vulnerabilities[].affected_packages[].vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].affected_packages[].version | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].cve.created_time_dt | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].cve.cvss[].base_score | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number | | vulnerabilities[].cve.cvss[].metrics[].name | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].cve.cvss[].metrics[].value | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].cve.cvss[].severity | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.cvss[].vector_string | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].cve.cvss[].version | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | vulnerabilities[].cve.desc | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.epss.score | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string | | vulnerabilities[].cve.product.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.product.vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.references[] | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.title | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].cve.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string | | vulnerabilities[].desc | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | string | | vulnerabilities[].first_seen_time | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | timestamp | | vulnerabilities[].first_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].fix_available | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | boolean | | vulnerabilities[].is_exploit_available | ✅ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | ✅ | boolean | | vulnerabilities[].is_fix_available | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | boolean | | vulnerabilities[].last_seen_time | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | timestamp | | vulnerabilities[].last_seen_time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].references[] | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ✅ | string | | vulnerabilities[].remediation.desc | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | string | | vulnerabilities[].severity | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | string | | vulnerabilities[].title | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | string | | vulnerabilities[].vendor_name | ✅ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ✅ | string | ## query_scans | Field | Qualys VMDR | Tenable VM | Type | | --- | --- | --- | --- | | creation_time | ❌ | ✅ | timestamp | | last_modified_time | ❌ | ✅ | timestamp | | name | ✅ | ✅ | string | | owner.uid | ✅ | ✅ | string | | schedule.days[] | ✅ | ❌ | string | | schedule.frequency | ✅ | ✅ | string | | schedule.repeat_interval | ✅ | ✅ | number | | schedule.time | ✅ | ✅ | string | | status | ❌ | ✅ | string | | uid | ✅ | ✅ | string | ## update_asset | Field | Nucleus VM | Type | | --- | --- | --- | | asset_info.cloud_provider | ✅ | string | | asset_info.container_info.container_id | ✅ | string | | asset_info.container_info.created_at | ✅ | string | | asset_info.container_info.image.name | ✅ | string | | asset_info.container_info.runtime | ✅ | string | | asset_info.container_info.state | ✅ | string | | asset_location | ✅ | string | | asset_name_secondary[] | ✅ | string | | image_tags[] | ✅ | string | | ip_address | ✅ | string | | ip_address_secondary[] | ✅ | string | | mac_address | ✅ | string | | operating_system_name | ✅ | string | | operating_system_version | ✅ | string | ## update_finding | Field | Nucleus VM | Type | | --- | --- | --- | | comment | ✅ | string | | due_date | ✅ | string | | finding_severity | ✅ | string | | finding_status | ✅ | string |