
Jun 21, 2023
1.0.0
ThreatQ version >= 5.14.0
Rapid7 InsightVM Action
Overview
Rapid7 InsightVM is a vulnerability management solution that provides three main features: fully scan the network; prioritize risks and step-by-step directions for remediation; track and communicate the progress using dashboards. This action gets the most recent list of sites that are defined in the Rapid7 InsightVM Security Console. For each site it submits the data collection containing assets to the Rapid7 InsightVM provider. The provider starts a scan for each site on the hosts that are in the list of summited assets and returns a report for each site.
The integration provides the following action:
- Rapid7 InsightVM - Scan Sites - scans all accessible sites on a Rapid7 insightVM instance using a threat collection of assets.
The action is compatible with the Asset object type and returns enriched Report system objects.
Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.