NodeZero
PlexTrac supports importing a file from NodeZero. Below are the mappings of fields.
​
PlexTrac finding field
NodeZero path
Notes
title
Name
​
severity
Severity
​
description
Name
​
tags
RootCause + Tags
combines the RootCause and Tags together and is comma separated
assetConnection
Each row is split into a finding and an asset
​
field: confirmed
​
​
label
"Confirmed"
​
value
Confirmed
​
field: context_score
​
​
label
"Context Score"
​
value
ContextScore
​
field: custom_field_1
​
the numbers for the custom fields increment
label
custom field 1| <label name>
the label is the portion of the col name that follows the |
value
custom field 1| <label name>
the row value for the column
field: root_cause
​
​
label
"Root Cause"
​
value
RootCause
​
score: cvss
​
​
label
"CVSS"
​
value
score::cvss
​
​
PlexTrac Asset field
NodeZero path
Notes
asset
IP
​
hostname
Hostname
​
knownIps
[IP]
an array of the IP
operating_system
OS
​
findingConnection
​
each row is split into a finding and an asset
number
Port
​
protocol
Protocal
​
service
Service
​
version
ServiceType
​
​
Click Next below to see more mappings.
Last modified 11d ago
Copy link