VulnCheck - Enrich CVE Data

VulnCheck - Enrich CVE Data enriches vulnerabilities on your system with information from VulnCheck, a tool providing vulnerability intelligence to predict avenues of attack. Once the Discovery Cycle is complete, you can view the data in the Vulnerability Management Module, under the Enrichment field, and also in the Vulnerabilities Repository. To learn more about the Enrichment field, see Vulnerability Fields.

General Settings

• Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
• Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
• Run action on assets matching following query (required) - Set to Devices > All Devices. (recommended). While a query is a mandatory field for triggering any Enforcement Action, in this particular Enforcement Set, the query parameters are not relevant as the enrichment runs on all vulnerabilities found, and does not actually run on query results. However, to ensure the enrichment action is triggered by a query, we recommend defining the query as Devices > All Devices.
• Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
• Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

Required Fields

These fields must be configured to run the Enforcement Set.
​

• API Token - See API Tokens for instructions on how to generate an API token from your VulnCheck account.

• Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Additional Fields

These fields are optional.

• Host Name or IP Address - (default: api.vulncheck.com) - The host name or IP address of a Recorded Future server.
• Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
• Gateway Name - Select the gateway through which to connect to perform the action.