Cisco Vulnerability Management

Adds a tag to an asset in Cisco Vulnerability Management (formerly Kenna).

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Build the request payload
[] Request the tag be added
[] Check if the request was successful:
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/tag-an-asset

Cisco Vulnerability Management - Add Tag to Asset

prod-nam

prod-eu

prod-apjc

Fetches all fixes for a given asset group from Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the fixes
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/show-all-fixes

Cisco Vulnerability Management - Get All Fixes for Asset Group

Fetches a specific asset from Cisco Vulnerability Management (formerly Kenna) by its ID.

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the asset
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/show-asset

Cisco Vulnerability Management - Get Asset by ID

Gets a list of known malware hashes (MD5, SHA1 and SHA256) for a single vulnerability by CVE ID from Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Note: This API is a premium feature and requires a Kenna.VI+ subscription.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get file hashes for the CVE
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/show-malware-hashes

Cisco Vulnerability Management - Get File Hashes by CVE

Fetches a specific fix (vulnerability solution) from Cisco Vulnerability Management (formerly Kenna) by its ID.

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the fix
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API:  https://apidocs.kennasecurity.com/reference/show-fix

Cisco Vulnerability Management - Get Fix by ID

Fetches the top fixes for a given asset group from Cisco Vulnerability Management (formerly Kenna).

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the top fixes
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/show-top-fix-groups

Cisco Vulnerability Management - Get Top Fixes for Asset Group

Gets a list of vulnerabilities for a specific asset from Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the vulnerabilities
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/show-asset-vulnerabilities

Cisco Vulnerability Management - Get Vulnerabilities by Asset ID

Gets a list of asset groups from Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the asset groups
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/list-asset-groups

Cisco Vulnerability Management - List Asset Groups

Gets a list of connectors from Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Fetch a list of connectors
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/list-connectors

Cisco Vulnerability Management - List Connectors

Lists the tags associated with an asset from Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Get the asset's tags
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/list-tags

Cisco Vulnerability Management - List Tags for Asset

Relates a vulnerability in Cisco Vulnerability Management (formerly Kenna) to a ServiceNow incident ticket.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Relate the vulnerability to ServiceNow
[] Check if the request was successful:
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/update-vulnerability

Cisco Vulnerability Management - Relate Vuln. to ServiceNow

Removes a tag from an asset in Cisco Vulnerability Management (formerly Kenna).

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Build the request payload
[] Request the tag be removed
[] Check if the request was successful:
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/untag-an-asset

Cisco Vulnerability Management - Remove Tag from Asset

Searches for assets that match the query string provided in Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Search for assets
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/search-assets

Cisco Vulnerability Management - Search Assets

Searches for vulnerabilities that match the query string provided in Cisco Vulnerability Management (formerly Kenna).

Note: This atomic has been updated to have additional and/or more user friendly output variables. The atomic's original output variable will now have "(Old)" in its name.

Target: Cisco Vulnerability Management integration target or an HTTP Endpoint for "api.<region>.kennasecurity.com"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the authorization header
[] Search for matching vulnerabilities
[] Check if the request was successful:
[]> If it was, extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://apidocs.kennasecurity.com/reference/search-vulnerabilities