# NodeZero

PlexTrac supports importing the ***weaknesses.csv*** from **NodeZero.** NodeZero includes a wide range of penetration testing and security auditing tools, such as network scanners, vulnerability scanners, password cracking tools, and exploit frameworks.&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F9X1fZptRteh7f351io5L%2Fnodezero.jpg?alt=media&#x26;token=0bfffb25-9a85-41e8-877f-7e900d7fd040" alt=""><figcaption></figcaption></figure></div>

## Finding Field Mappings

Below are the mappings of fields and any reference notes to provide context. All data flows from NodeZero to PlexTrac. If a field is not listed, PlexTrac does not currently import it.

<table><thead><tr><th width="228">NodeZero Field</th><th width="129" align="center">Direction</th><th>PlexTrac Field</th></tr></thead><tbody><tr><td>NodeZero</td><td align="center">--></td><td>Finding Source</td></tr><tr><td>Title</td><td align="center">--></td><td>Finding Title</td></tr><tr><td>Description</td><td align="center">--></td><td>Finding Description</td></tr><tr><td>Score</td><td align="center"></td><td>Finding Severity</td></tr><tr><td><em>1 - 3.9</em></td><td align="center">--></td><td><em>Low</em></td></tr><tr><td><em>4 - 6.9</em></td><td align="center">--></td><td><em>Medium</em></td></tr><tr><td><em>7 - 8.9</em></td><td align="center">--></td><td><em>High</em></td></tr><tr><td><em>9 - 10</em></td><td align="center">--></td><td><em>Critical</em></td></tr><tr><td>Finding Status</td><td align="center">--></td><td>Open</td></tr><tr><td>ProvenEntityEid</td><td align="center">--></td><td>Finding Tags</td></tr><tr><td>Root Cause</td><td align="center">--></td><td>Finding Tags</td></tr><tr><td>Confirmed/Unconfirmed</td><td align="center"></td><td>Custom Field</td></tr><tr><td><em>Potential</em></td><td align="center">--></td><td><em>Custom Field Value</em></td></tr><tr><td><em>Confirmed</em></td><td align="center">--></td><td><em>Custom Field Value</em></td></tr><tr><td>Root Cause or Type</td><td align="center"></td><td>Custom Field: "Root Cause"</td></tr><tr><td><em>Security Misconfiguration</em></td><td align="center">--></td><td><em>Custom Field Value</em></td></tr><tr><td><em>Vulnerability</em></td><td align="center">--></td><td><em>Custom Field Value</em></td></tr><tr><td>Context Score</td><td align="center"></td><td>Custom Field: "Context Score"</td></tr><tr><td><em>Context Score Number</em></td><td align="center">--></td><td><em>Custom Field Value Numeric</em></td></tr><tr><td>Impact</td><td align="center">--></td><td>Custom Field</td></tr><tr><td>Mitigations</td><td align="center">--></td><td>Recommendations</td></tr><tr><td>References</td><td align="center">--></td><td>References</td></tr></tbody></table>

## Asset Field Mappings

Below are the mappings of fields and any reference notes to provide context. All data flows from NodeZero to PlexTrac. If a field is not listed, PlexTrac does not currently import it.

<table><thead><tr><th>NodeZero Field</th><th width="129" align="center">Direction</th><th>PlexTrac Field</th></tr></thead><tbody><tr><td>IP or Host Name</td><td align="center">-></td><td>Child Asset Name</td></tr><tr><td>IP or Host Name</td><td align="center">-></td><td>Affected Asset - Child Asset Name</td></tr><tr><td>Hostname</td><td align="center">-></td><td>Hostname</td></tr><tr><td>IP</td><td align="center">-></td><td>Known Ips (Array)</td></tr><tr><td>OS</td><td align="center">-></td><td>Operating System (Common Delimited)</td></tr><tr><td>Port</td><td align="center">-></td><td>Number</td></tr><tr><td>Protocol</td><td align="center">-></td><td>Protocol</td></tr><tr><td>Service</td><td align="center">-></td><td>Service</td></tr><tr><td>Service Type</td><td align="center">-></td><td>Version</td></tr><tr><td>First Seen</td><td align="center">-></td><td>First Found</td></tr></tbody></table>
