Queries for the Rapid7InsightVMCloudVulnerabilities table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Rapid7 InsightVM Cloud Vulnerabilities

Summarizes vulnerabilities.

source
| project
 TimeGenerated = now(),
 Added = todatetime(added),
 Categories = tostring(categories),
 Cves = tostring(cves),
 CvssV2AccessComplexity = tostring(cvss_v2_access_complexity),
 CvssV2AccessVector = tostring(cvss_v2_access_vector),
 CvssV2Authentication = tostring(cvss_v2_authentication),
 CvssV2AvailabilityImpact = tostring(cvss_v2_availability_impact),
 CvssV2ConfidentialityImpact = tostring(cvss_v2_confidentiality_impact),
 CvssV2ExploitScore = todouble(cvss_v2_exploit_score),
 CvssV2ImpactScore = todouble(cvss_v2_impact_score),
 CvssV2IntegrityImpact = tostring(cvss_v2_integrity_impact),
 CvssV2Score = todouble(cvss_v2_score),
 CvssV2Vector = tostring(cvss_v2_vector),
 CvssV3AttackComplexity = tostring(cvss_v3_attack_complexity),
 CvssV3AttackVector = tostring(cvss_v3_attack_vector),
 CvssV3AvailabilityImpact = tostring(cvss_v3_availability_impact),
 CvssV3ConfidentialityImpact = tostring(cvss_v3_confidentiality_impact),
 CvssV3ExploitScore = todouble(cvss_v3_exploit_score),
 CvssV3ImpactScore = todouble(cvss_v3_impact_score),
 CvssV3IntegrityImpact = tostring(cvss_v3_integrity_impact),
 CvssV3PrivilegesRequired = tostring(cvss_v3_privileges_required),
 CvssV3Scope = tostring(cvss_v3_scope),
 CvssV3Score = todouble(cvss_v3_score),
 CvssV3UserInteraction = tostring(cvss_v3_user_interaction),
 CvssV3Vector = tostring(cvss_v3_vector),
 DenialOfService = tobool(denial_of_service),
 Description = tostring(description),
 Exploits = tostring(exploits),
 Id = tostring(id),
 Links = tostring(links),
 MalwareKits = tostring(malware_kits),
 Modified = todatetime(modified),
 PciCvssScore = todouble(pci_cvss_score),
 PciFail = tobool(pci_fail),
 PciSeverityScore = todouble(pci_severity_score),
 PciSpecialNotes = tostring(pci_special_notes),
 PciStatus = tostring(pci_status),
 Published = todatetime(published),
 References = tostring(references),
 RiskScore = todouble(risk_score),
 Severity = tostring(severity),
 SeverityScore = todouble(severity_score),
 VulnerabilityTitle = tostring(['title'])