As of December 31st, 2023 ThreadFix 2.X has reached End of Life and is no longer supported. For any further information please contact the Success and Implementation team.

InsightVM

You will learn

How to create a ThreadFix report from InsightVM.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

Generate an InsightVM Report

  1. Navigate to the Reports page from the Navigation sidebar. Note the Reports page icon highlighted below:

     

  2. By default the Reports page displays a current set of viewable reports.

     

  3. Create a new report by clicking the Create a report button and enter a name for the report. Select the appropriate time zone from the Report time zone drop-down list.

  4. Scroll down to the Template menu and click on the Export tab. Use the navigation arrows, click on see all, or enter “XML Export 2.0” into the search bar to find the XML Export 2.0 option. Once found, click on the report, it will display a blue and white icon with a checkmark indicating it is “Selected”.

     

  5. To define the the report’s scope, first scroll down to the Scope section and click on the Select Sites, Assets, Asset Groups or Tags button.


    See the highlighted image below:

     

  6. A Select Report Scope pop-up modal with appear. Select all sites generated by ThreadFix Network and click the Done button.

     

  7. The reporting frequency can be selected by scrolling down to the Frequency section. From the frequency drop-down list, select the desired reporting frequency rate and click either the SAVE & RUN THE REPORT button or SAVE THE REPORT button. Note: if the report is not on a schedule, it will not be generated if the SAVE THE REPORT button is clicked.

     

    See the highlighted image below:

ThreadFix recommends selecting “Run a recurring report after every scan” or “Run a recurring report on a schedule”, with the latter having any scheduled point reasonably between the usual end of a Scheduled Scan, but before a Scheduled Import from ThreadFix Network.

Report Format Requirements

  • The InsightVM integration only allows imports of reports in a xml-export-v2 format in order to be ingested by ThreadFix. InsightVM reports can be scoped at the site/asset group/asset level and include a list of all relevant scans for specified the scope.

  • The name of the report is configurable when creating/editing the provider configuration however the configured report must be in a xml-export-v2 format.

  • When parsing the report, ThreadFix will use the latest start date of all listed scans for the scan date though scans that are not complete will not be included.

www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.

This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.