Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added support to fetch assets in Tenable io #31896

Merged
merged 123 commits into from Apr 4, 2024
Merged
Show file tree
Hide file tree
Changes from 9 commits
Commits
Show all changes
123 commits
Select commit Hold shift + click to select a range
df68ba3
added support to fetching assets
merit-maita Jan 1, 2024
5dab7c3
added to readme
merit-maita Jan 2, 2024
6d92741
added to readme
merit-maita Jan 2, 2024
aa70fc6
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 2, 2024
221242b
edit display name
merit-maita Jan 2, 2024
4b07afa
edits after demo
merit-maita Jan 2, 2024
857e431
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 2, 2024
fe3ab35
moved params to advance
merit-maita Jan 2, 2024
18a9684
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 2, 2024
67bc1a6
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 3, 2024
cd01f0f
Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.yml
merit-maita Jan 3, 2024
a435bdb
Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io_descriptio…
merit-maita Jan 3, 2024
467f4ef
Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io_descriptio…
merit-maita Jan 3, 2024
2f3dc46
Update Packs/Tenable_io/Integrations/Tenable_io/Tenable_io.py
merit-maita Jan 3, 2024
3a4e02d
Merge remote-tracking branch 'origin/tenable_io_assets_support' into …
merit-maita Jan 3, 2024
35c2a9a
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 14, 2024
7a3ea3d
edits after demo
merit-maita Jan 14, 2024
e6bd930
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 14, 2024
47e921b
updated the rn
merit-maita Jan 14, 2024
a7a8606
update after build failed
merit-maita Jan 15, 2024
7f3fdc2
edit
merit-maita Jan 15, 2024
7b9f25f
update
merit-maita Jan 15, 2024
2fb41b3
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 15, 2024
4b69ea3
fixes
merit-maita Jan 15, 2024
9d1a3b1
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 16, 2024
f967c70
added models for testings
merit-maita Jan 16, 2024
0987520
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 16, 2024
f898efd
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 16, 2024
6b2e42b
edits docs
merit-maita Jan 16, 2024
5b34908
edits in mr
merit-maita Jan 17, 2024
25fe810
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 17, 2024
6aa61e4
edit doc
merit-maita Jan 21, 2024
2a8d145
Updated modeling rule.
yasta5 Jan 22, 2024
303d134
Updated modeling rule.
yasta5 Jan 22, 2024
0fbdeb3
edited sections
merit-maita Jan 23, 2024
349e437
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 24, 2024
e87f341
added key word
merit-maita Jan 24, 2024
d56317f
Added release notes.
yasta5 Jan 24, 2024
866f0b1
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 25, 2024
820c2bc
Merge remote-tracking branch 'origin/tenable_io_assets_support' into …
merit-maita Jan 25, 2024
2c70dcd
deleted sections
merit-maita Jan 25, 2024
21beca7
updated the version in rn
merit-maita Jan 25, 2024
50ea28d
updated rn
merit-maita Jan 25, 2024
36f80f4
Merge branch 'master' into tenable_io_assets_support
yasta5 Jan 28, 2024
d746f43
Merge remote-tracking branch 'origin/tenable_io_assets_support' into …
merit-maita Jan 28, 2024
90fdb00
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 28, 2024
4b439da
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 29, 2024
8b8fbcf
updated the yml
merit-maita Jan 29, 2024
44f4962
updated do
merit-maita Jan 29, 2024
3e68045
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 30, 2024
0503074
removed the severity param
merit-maita Jan 30, 2024
cedcc2d
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 30, 2024
713be02
check the display order
merit-maita Jan 31, 2024
183f4b8
added logs
merit-maita Jan 31, 2024
5fe1f54
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 31, 2024
5ece148
revert
merit-maita Jan 31, 2024
98d5954
edited mr name
merit-maita Jan 31, 2024
9aed197
Merge branch 'master' into tenable_io_assets_support
merit-maita Jan 31, 2024
5fb83fc
reverted changes
merit-maita Jan 31, 2024
883f520
updated modeling rules name
merit-maita Jan 31, 2024
10e14ed
Unified the modeling rules to be in one directory as it was
yasta5 Feb 1, 2024
0da6482
Updated the release note
yasta5 Feb 1, 2024
d12759f
Merge branch 'master' into tenable_io_assets_support
merit-maita Feb 6, 2024
5faeab6
Merge branch 'master' into tenable_io_assets_support
merit-maita Feb 6, 2024
204d9d7
removed severity
merit-maita Feb 7, 2024
9d17c41
Merge branch 'master' into tenable_io_assets_support
merit-maita Feb 7, 2024
a35f763
added logs
merit-maita Feb 7, 2024
c32e60e
added support to _time field
merit-maita Feb 11, 2024
5934292
Merge branch 'master' into tenable_io_assets_support
merit-maita Feb 11, 2024
70e59b1
tests
merit-maita Feb 20, 2024
725c03c
Merge branch 'master' into tenable_io_assets_support
merit-maita Feb 20, 2024
7fe48a5
upated do
merit-maita Feb 20, 2024
c267012
edited unit test
merit-maita Feb 20, 2024
e758eab
Merge branch 'master' into tenable_io_assets_support
merit-maita Feb 25, 2024
d114f1a
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 3, 2024
e25c388
edit
merit-maita Mar 3, 2024
0026588
edit after cr
merit-maita Mar 3, 2024
de83b58
updated rn
merit-maita Mar 3, 2024
a80bb76
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 3, 2024
df6ae5f
edits
merit-maita Mar 4, 2024
1fca2d4
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 4, 2024
d2ccc01
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 5, 2024
70f0217
Added placeholder asset mapping
yasta5 Mar 6, 2024
485cfd2
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 6, 2024
cf5859c
Fixed the id of the asset collection in the yml file
yasta5 Mar 6, 2024
5269a47
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 6, 2024
7659c64
Update yml file of asset modeling rule
yasta5 Mar 6, 2024
ff54d1a
Merge remote-tracking branch 'origin/tenable_io_assets_support' into …
merit-maita Mar 6, 2024
ab2c633
added rn to assets modeling rule
merit-maita Mar 6, 2024
d3d999d
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 6, 2024
ac43e24
Modified the release note of asset modeling rule.
yasta5 Mar 6, 2024
51a462f
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 6, 2024
f82ba3d
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 7, 2024
e8c7c26
Update yml file of asset modeling rule.
yasta5 Mar 7, 2024
0848d67
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 7, 2024
0f9eaa9
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 7, 2024
7454686
Added xdm asset field to asset modeling rule
yasta5 Mar 10, 2024
ded9d87
Merge branch 'master' into tenable_io_assets_support
yasta5 Mar 10, 2024
afdf385
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 10, 2024
a00028f
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 12, 2024
ae13460
updated do
merit-maita Mar 12, 2024
56b4d38
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 12, 2024
f7903c4
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 13, 2024
b3f1945
edit
merit-maita Mar 13, 2024
2890629
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 13, 2024
23f134a
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 20, 2024
c0808c1
added hidden
merit-maita Mar 20, 2024
bfc096f
updated do
merit-maita Mar 20, 2024
537424f
edits
merit-maita Mar 20, 2024
051fe9b
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 20, 2024
388df07
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 20, 2024
3023c9c
removed edit
merit-maita Mar 20, 2024
7e6c466
added events interval param
merit-maita Mar 21, 2024
d8ac5e9
added param events interval
merit-maita Mar 21, 2024
49da6b2
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 21, 2024
0e027ca
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 22, 2024
ad5d61f
Merge branch 'master' into tenable_io_assets_support
merit-maita Mar 24, 2024
5e677ad
Merge branch 'master' into tenable_io_assets_support
merit-maita Apr 2, 2024
431aa9c
Merge branch 'master' into tenable_io_assets_support
merit-maita Apr 2, 2024
95cf693
fix
merit-maita Apr 3, 2024
716162a
Merge branch 'master' into tenable_io_assets_support
merit-maita Apr 3, 2024
877d80b
Merge branch 'master' into tenable_io_assets_support
merit-maita Apr 3, 2024
0a93c63
Merge branch 'master' into tenable_io_assets_support
merit-maita Apr 4, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
2 changes: 1 addition & 1 deletion Packs/Tenable_io/.pack-ignore
Expand Up @@ -2,7 +2,7 @@
ignore=RM104

[file:Tenable_io.yml]
ignore=BA108,BA109
ignore=BA108,BA109,IN150,IN161

[file:TenableioEventCollector_1_3.yml]
ignore=MR108
Expand Down
59 changes: 51 additions & 8 deletions Packs/Tenable_io/Integrations/Tenable_io/README.md
Expand Up @@ -7,13 +7,17 @@ This integration was integrated and tested with January 2023 release of Tenable.
2. Search for Tenable.io.
3. Click **Add instance** to create and configure a new integration instance.

| **Parameter** | **Required** |
| --- | --- |
| URL | True |
| Access key | True |
| Secret key | True |
| Trust any certificate (not secure) | False |
| Use system proxy settings | False |
| **Parameter** | **Description** | **Required** |
| --- | --- | --- |
| URL | Tenable URL. | True |
| Access Key | Tenable API access key. | True |
| Secret Key | Tenable API secret key. | True |
| Assets Fetch Interval | Fetch interval in minutes for assets and vulnerabilities. | True |
| Severity | The severity of the vulnerabilities to include in the export. | False |
| First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days) | | False |
| Max Fetch | The maximum number of audit logs to retrieve for each event type. For more information about event types see the help section. | False |
| Trust any certificate (not secure) | | False |
| Use system proxy settings | | False |

4. Click **Test** to validate the URLs, token, and connection.

Expand Down Expand Up @@ -46,6 +50,9 @@ This integration was integrated and tested with January 2023 release of Tenable.
| Three concurrent requests per Tenable.io customer instance.<br>Note: This limit is subject to change. | tenable-io-list-scans<br>tenable-io-launch-scan<br>tenable-io-get-scan-report<br>tenable-io-get-vulnerability-details<br>tenable-io-get-vulnerabilities-by-asset <br>tenable-io-get-scan-status<br>tenable-io-resume-scan<br>tenable-io-pause-scan<br>tenable-io-get-asset-details |
| Two concurrent asset exports per container. Tenable.io also prevents duplicate exports from running concurrently. <br>For example, export requests with the same filters. | tenable-io-export-assets<br>tenable-io-export-vulnerabilities |

## Notes:
- ***Fetch assets and vulnerabilities*** command fetches assets and vulnerabilities from the last 90 days only.

## Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook.
Expand Down Expand Up @@ -1594,4 +1601,40 @@ Scans that are actively running cannot be exported (run "tenable-io-list-scans"

>Preparing scan report:

>Returned file: scan_16_SSE-144f3dc6-cb2d-42fc-b6cc-dd20b807735f-html.html [Download](https://www.paloaltonetworks.com/cortex)
>Returned file: scan_16_SSE-144f3dc6-cb2d-42fc-b6cc-dd20b807735f-html.html [Download](https://www.paloaltonetworks.com/cortex)


### tenable-io-get-audit-logs
***
Returns audit logs extracted from Tenable io.


#### Base Command

`tenable-io-get-audit-logs`
#### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| should_push_events | Set this argument to True in order to create events, otherwise the command will only display the events. Possible values are: true, false. Default is false. | Required |
| limit | The maximum number of alerts to return (maximum value - 5000). | Optional |
| from_date | Return events that occurred after the specified date. | Optional |
| to_date | Return events that occurred before the specified date. | Optional |
| actor_id | Return events that contain the specified actor UUID. | Optional |
| target_id | Return events matching the specified target UUID. | Optional |


#### Context Output

There is no context output for this command.

#### Command example
```!tenable-io-get-audit-logs limit=1```


#### Human Readable Output

>### Audit Logs List:
>|Action| Actor | Crud | Description | Fields | Id |Is Anonymous|Is Failure|Received| Target |
>|----------|------|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------|-----|---|---|---|-----------------------------------------------------|---|
>| user.create | id: test | c | | {'key': 'X-Access-Type', 'value': 'apikey'},<br>{'key': 'X-Forwarded-For', 'value': '1.2.3.4'},<br>{'key': 'X-Request-Uuid', 'value': '12:12:12:12:12'} | 12 | true | false | 2022-05-18T16:33:02Z | id: 12-1-1-1-1<br>name: test@test.com<br>type: User |