How do I find aws instances with vulns where CVSS >=5?

jdowdy
jdowdy ✭✭✭✭✭
in Security Engineering
We would like to find aws instances with vulns where CVSS >=5 and include Qualys host findings with it. How would we do that?

Answers

  • crystralRamirez
    crystralRamirez ✭✭✭✭✭
    Try this query:
    FIND aws_instance as i 
THAT HAS qualys_host_finding AS qf 
THAT IS qualys_vuln AS qv 
WHERE qv.[cvssScoreV3] >= 5
RETURN i.instanceId, qf.qid, qf.protocol, qf.port, qv.name, qv.[cvssScoreV3],qv.solution

This Month's Leaders

Categories