Links

Nessus

PlexTrac supports importing NESSUS files from Nessus.
Below are the mappings of fields and any reference notes to provide context. If a field is not listed, then PlexTrac does not currently import.
PlexTrac finding field
Nessus path
Notes
title
<Report><ReportHost><ReportItem><plugin_name>
severity
<Report><ReportHost><ReportItem><severity>
references
All the "and" s are checked, and if found are appended to the refrences array.
recommendations
<Report><ReportHost><ReportItem><solution>
description
<Report><ReportHost><ReportItem><description>
risk_score
common_identifiers
<Report><ReportHost><ReportItem><cve> and <Report><ReportHost><ReportItem><cwe>
caption
<Report><ReportHost name=(get asset identifier)>
We use the ReportItem element attributes port and svc_name.
code
label
Synopsis
hard-coded
value
<Report><ReportHost><ReportItem><synopsis>
label
CVSS Base Score
hard-coded
value
<Report><ReportHost><ReportItem><cvss_base_score>
calculation
<Report><ReportHost><ReportItem><cvss_vector>
label
CVSSv3 Base Score
hard-coded
value
<Report><ReportHost><ReportItem><cvss3_base_score>
calculation
<Report><ReportHost><ReportItem><cvss3_vector>
label
CVSSv3 Temporal Score
hard-coded
value
<Report><ReportHost><ReportItem><cvss3_temporal_score>
calculation
<Report><ReportHost><ReportItem><cvss3_temporal_vector>
PlexTrac asset field
Nessus path
Notes
asset
<Report><ReportHost name=(get asset identifier)>
We parse out the name of the ReportHost element for the asset identifier.
host_fqdn
<Report><ReportHost><HostProperties (host-fqdn=<value)>
Value comes from host-fqdn attribute.
host_rdns
<Report><ReportHost><HostProperties (host-rdns=<value)>
Value comes from host-rdns attribute.
mac_address
<Report><ReportHost><HostProperties (host-mac-address=<value)>
Value comes from mac-address attribute.
operating_system
<Report><ReportHost><HostProperties (host-fqdn=<value)>
Value comes from operating-system attribute.
netbios_name
<Report><ReportHost><HostProperties (host-netbios-name=<value)>
Value comes from netbios-name attribute.
total_cves
<Report><ReportHost><HostProperties (host-patch-summary-total-cves=<value)>
Value comes from patch-summary-total-cves attribute/
number
<Report><ReportHost><ReportItem><port>
protocol
<Report><ReportHost><ReportItem><protocol>
service
<Report><ReportHost><ReportItem><svc_name>
Last modified 3mo ago
© 2022 PlexTrac, Inc. All rights reserved.