How to implement a custom scanner integration for Vulnerability Response when there no OOB connector

[VenkateshS08928]

Hi Everyone,

We are building a custom integration for Vulnerability Response to ingest vulnerability findings from a scanner for which no out-of-box connector is available. Looking for guidance on the best implementation approach, including data ingestion, mapping to VR tables, handling normalization/classification, and any recommended best practices or lessons learned.

I know we can use the Vulnerability response integration framework but there is not enough information on the field mapping setup, transform map, post processing etc.

Any guidance, suggestions, or examples would be greatly appreciated.

Thanks in advance

[Eliz Skogquist]

Hi VenkateshS08928,
You can review this KB for more detailed steps on using the framework leveraging the Integration Assistant.  It includes update sets for you to start your work from simplifying your efforts further.  You will need to log in to Support to access this KB.

Best regards,

Elizabeth

[Tanushree Maiti]

Hi @VenkateshS08928 

Refer this : Vulnerability Response integrations 

                    Success with Vulnerability Response: Deep-dive into Classification Rules and Assignment Rules