NodeZero
PlexTrac supports importing CSV files from NodeZero.
Below are the mappings of fields and any reference notes to provide context. If a field is not listed, then PlexTrac does not currently import.
PlexTrac finding field | NodeZero path | Notes |
|---|---|---|
title | Name | |
severity | Severity | |
description | Name | |
tags | RootCause + Tags | combines the RootCause and Tags together and is comma separated |
assetConnection | Each row is split into a finding and an asset | |
field: confirmed | | |
label | "Confirmed" | |
value | Confirmed | |
field: context_score | | |
label | "Context Score" | |
value | ContextScore | |
field: custom_field_1 | | the numbers for the custom fields increment |
label | custom field 1| <label name> | the label is the portion of the col name that follows the | |
value | custom field 1| <label name> | the row value for the column |
field: root_cause | | |
label | "Root Cause" | |
value | RootCause | |
score: cvss | | |
label | "CVSS" | |
value | score::cvss | |
score: cvss3 | | |
label | score::cvss3:: | col value is the value + "::" + calculation |
calculation | ::score::cvss3 | col value is the value + "::" + calculation |
score: general | | |
label | score:: | col name is "score::" + the label name |
value | score:::: | col value is the value + "::" + calculation |
calculation | ::score:: | col value is the value + "::" + calculation |
PlexTrac asset field | NodeZero path | Notes |
|---|---|---|
asset | IP | |
hostname | Hostname | |
knownIps | [IP] | an array of the IP |
operating_system | OS | |
findingConnection | | each row is split into a finding and an asset |
number | Port | |
protocol | Protocal | |
service | Service | |
version | ServiceType | |
Last modified 3mo ago