Tenable.io

Version: Tenable.io (Cloud and Security centre)

Tenable provides comprehensive visibility into the security posture of container images as they are developed, enabling vulnerability assessment, malware detection, policy enforcement and remediation prior to container deployment.

Netsurion's Open XDR platform monitors user activities, all possible kind of vulnerabilities that has been detected and auditing of Scap and Oval activities.

Netsurion Data Source Integration for Tenable.io allows you to monitor the following components:-

  • Security - Configuration changes and vulnerability detections.
  • Compliance - Network auditing and complaince results.
  • Operation - Identifying active hosts and open network ports.

Once Tenable.io is configured to deliver events to Netsurion's Open XDR platform; alerts, dashboards and reports can be configured into Netsurion's Open XDR platform.

Some of the Data Source Integrations available in Netsurion are listed below. 

Reports

Type Name Description
Security Tenable - Credentialed patch audit This report provides details about the patches that are missing in the windows and Unix systems which an attacker can use for exploits.
Security Tenable - Malware detection This report provides details about the vulnerable malware that are present in the linux and windows machine.
Security Tenable - Badlock detection This report provides details about all the badlock attacks occurring in the network. Badlock detection can be identified by their CVE. Badlock CVE’s are as follows (CVE-2015-5370|CVE-2016-2110|CVE-2016-2111|CVE-2016-2112|CVE-2016-2113|CVE-2016-2114|CVE-2016-2115|CVE-2016-2118|CVE-2016-0128)
Security Tenable - Drown detection This report provides details about the drown attacks that take place in a network, this vulnerability affects the Https services that rely on SSL and TLS. These vulnerabilities can be identified by their respective CVE’s. Drown CVE are as follows (CVE-2016-0702|CVE-2016-0705|CVE-2016-0797|CVE-2016-0798|CVE-2016-0799|CVE-2016-0800)
Security Tenable - Bash shellshock detection This report provides details about the vulnerabilities that affects the bash. These vulnerabilities can be identified by their respective CVE’s. Shellshock CVE are as follows CVE-2015-5370 |CVE-2016-2110 |CVE-2016-2111 |CVE-2016-2112 |CVE-2016-2113 |CVE-2016-2114 |CVE-2016-2115|CVE-2016-2118|CVE-2016-0128)
Operations Tenable - Host dicovery This report provides the number of alive hosts and active ports on a network.
Compliance Tenable - User activities This report provides all the activities done by the user.
Compliance Tenable - Scap and Oval auditing This report pprovides details on how to generate SCAP and Oval content audit scan results.

Documentation

The configuration details are consistent with Netsurion version 8.x and later, Tenable.io (Cloud and Security centre).

Download Integration Guide for more information.

This site uses cookies to store information on your computer. Some are essential to make our site work; others help us improve the user experience. By using the site, you consent to the placement of these cookies. Read our Privacy Statement to learn more.

I Accept