Best way to check and monitor accuracy of data ingested from VR scanners e.g. Tenable
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-17-2024 11:22 PM
What's the best way to check and monitor accuracy of data ingested from scanners like Tenable?
Given that we have integration run, data sources and import set tables.
TIA.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-18-2024 04:55 AM
What I would do is do a sampling of Tenable detections and do lookups of those detections within ServiceNow to check for accuracy. You can also compare your number of detections in ServiceNow vs Tenable (based on your integration config). With Qualys, there is the Qualys Overview dashboard which shows some quick numbers of CIs, Open VITs, etc. I would assume the Tenable integration has something similar. There is a newer SecOps Health Analytics app that runs nightly jobs and measures your health on VR integration, configuration, etc that I have found useful as well. If you don't already have that installed, I would recommend it.
