Classes

• _global_
• Account
• AccountImpl
• Action
• Array
• Asset
• Collector
• Connector
• Customer
• DataMap
• Date
• DNS
• Event
• EventSource
• EventSourceServer
• File
• Identity
• IdentityImpl
• Input
• IntegratorInstance
• JSDataObject
• KeyMap
• Record
• Scan
• Scanner
• Session
• SQLQuery
• String
• Trust
• TrustImpl
• Vuln

Class Scanner

The Scanner class provides methods for defining and storing vulnerabilities detected on enterprise assets. It depends on several other classes, including the Asset class, the Vuln class, and the Scan class. In general, a vulnerability scanner will perform a scan of an enterprise asset checking all ports on that asset for known vulnerabilities. The entire result set of that scan will be placed in a file which is then processed by a Collector. The process followed is usually to construct a Scanner object which describes the vulnerability scanner, then a Scan object which describes the full scan that took place. Then, a Vuln object is created for each detected vulnerability, attached to the relevant Asset, and stored in the database. It is also possible for the vulnerability scanner to perform a 'partial' scan which means that only specific ports are scanned. In this case, the scan data will not replace the entire set of vulnerability information known for an asset, but only for those ports which were scanned. The class accepts a pre-defined set of vulnerability attributes:

• GUID {GUID} : Unique identifier for this Scanner; you can use the EventSourceID (rec.s_RV24)
• Vendor {String} : Name of the vendor who manufactures this scanner; if you don't set this, the Collector vendor name will be used.
• Product {String} : Name of the product line of which this scanner is a member; if you don't set this, the Collector product name will be used.
• Version {String} : The version of the scanner product
• Customer* {Customer} : The customer who owns this asset (defines a namespace)
• Type {String} : The type of scanner; currently hard-coded to 'VULN'

instance.CONFIG.scanner = new Scanner({"Vendor":"Tenable","Product":"Nessus"});
// See Scan class for a full example