Vulnerability Findings Cron
Retrieves vulnerability data and associated metadata for assets from Tenable, including details like CVE identifiers, CVSS scores, descriptions, solution information, and affected systems.
Sync Type: Full Synchronization
Requirements
- Log in to Tenable.io and go to the Create a service account page.
- Enter
Monad Serviceas the name. - Fill out the rest of the service account fields using your organization's usual process.
- Set the Role to
Scan Managerand click Finish.
- Click the new service user and select API Keys on the left.
- Copy the access key and secret key. You'll need them when you set up the Monad connector.
Details
The same vulnerabilities from Tenable Vulnerability Findings are returned but a full sync is performed based on a set cron schedule. Because every run re-exports the current state, there is no watermark and no incremental filtering.
By default Monad requests OPEN and REOPENED vulnerabilities only, matching Tenable's own behavior when the state filter is omitted. Add FIXED to Vulnerability States to also collect remediations.
Configuration
The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.
Settings
| Setting | Type | Required | Description |
|---|---|---|---|
| Cron | string | Yes | Cron string for scheduling tasks. Ex: '0 0 * * *' for daily execution at midnight. |
| Vulnerability States | array of string | No | Vulnerability states to fetch: OPEN, REOPENED, FIXED. Defaults to OPEN and REOPENED. Add FIXED to also collect remediations. |
| API Rate Limit | object | No | Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See API Rate Limiting for the field format, limits, and how to choose a value. |
Secrets
| Secret | Type | Required | Description |
|---|---|---|---|
| Access Key | string | Yes | Access Key for the Tenable API. This is required to authenticate requests. |
| Secret Key | string | Yes | Secret Key for the Tenable API. This is required to authenticate requests. |
OCSF Conversion
The following JQ transformation converts Tenable Vulnerability data to OCSF Version 1.0.0-rc.2 compliant format.
Sync frequency
This input runs on a cron schedule (default hourly, 0 * * * *), which you can configure on the pipeline. See Input Sync Frequency for details.