Vulnerability Response How to populate more fields to update source data on Discovered Items

bpolo
Tera Guru

Out of Box in Vulnerability Response Application certain data on the "source_data"  field on Discovered items are updated during the integration with Rapid7. The table that has the attributes of the fields that are updated on the source_data field is sn_vul_r7_ivm_host_attrb.

We are needing to update the "risk_score" field on the source_data as well.

We could add a custom field on the table, but then the question is where is the mapping done to populate the source_data?

 

Thanks in advance! 

1 ACCEPTED SOLUTION

bpolo
Tera Guru

So in case anyone has this issue as well, it appears that the script include "ImportHostCmn" does the mapping. Also, there is code for the asset_risk_score field population, but OOB, the payload field in the script is not correct. Once we changed the payload field to the correct value, asset risk score is now being populated correctly. 

View solution in original post

1 REPLY 1

bpolo
Tera Guru

So in case anyone has this issue as well, it appears that the script include "ImportHostCmn" does the mapping. Also, there is code for the asset_risk_score field population, but OOB, the payload field in the script is not correct. Once we changed the payload field to the correct value, asset risk score is now being populated correctly.