Vulnerability management
Scan and respond to unpatched software vulnerabilities
Get inspiration for ways to automate the entire vulnerability lifecycle. Go to the All view for the full list of stories.
Featured stories
We fetched a few stories to help you get started with smarter vulnerability management.
Fetch & record significant vulnerabilities from Qualys Container SecurityFetch significant vulnerabilities from the Qualys Container Security API and open up a corresponding Jira ticket for each impacted container with the information returned from Qualys.Tools: Jira Software, Qualys
Fetch and record CrowdStrike Spotlight vulnerabilities with JiraPull all open CrowdStrike Spotlight vulnerabilities and filter the vulnerabilities by CVE. Then create issues in Jira for CVEs that have not been seen before or reopen closed issues if new machines have been impacted by a CVE. Automox can also be used to initiate patches for identified vulnerabilities.Tools: Automox, CrowdStrike, Jira Software
Triage CISA vulnerabilities using Slack interactivity buttonsFetch CISA Known Exploited Vulnerabilities (KEVs), filter for vulnerabilities added today, convert them to markdown format, send each one to Slack with interactive buttons for triage, and create Tines cases when users submit the intake form.Tools: CISA, Slack
Get asset vulnerability information from TenableGet vulnerability information from Tenable. Search your asset inventory using multiple parameters to retrieve relevant information.Tools: Tenable Vulnerability Management
Get end of life details for a productGet the end of life details for a particular product, e.g python, ruby etc. Also specify a version number to get more accurate information.
Check updated CVEs for exploitation using VulnCheck and GreyNoiseReview all modified CVEs for new signs of exploitation. Obtain up-to-date CVE lists from VulnCheck and compare them against GreyNoise's real-world CVE exploitation data. A summary of the findings, including IP addresses to be blocked, will be provided.Tools: GreyNoise, VulnCheck
Get routine security updates and create cases based on calculated severityGather weekly security updates from Microsoft, assess severity, and create cases based on that data. Search for affected devices in Axonius, add them to the cases, and send an email with a detailed report to the relevant parties.Tools: Axonius
Create issues in Jira for Sysdig vulnerability findingsExtract runtime scan results in Sysdig for image vulnerabilities in your domain.
If vulnerabilities are discovered and haven't been raised yet in Jira, a new issue is created detailing the finding.Tools: Jira Software, SysdigCustomer focus
How Mars addresses vulnerabilities faster with Tines
On top of that, the Mars teams that would never have been able to use Splunk can use Tines because of the no-code approach.
How it works
Instantly import stories to your tenant where you can adapt them to meet your unique business requirements.
Explore
Import
Adapt
Get started fast
Learners welcome
Step through beginner to advanced topics as you explore our tailored courses on Tines Stories University
Get end of life details for a productGet the end of life details for a particular product, e.g python, ruby etc. Also specify a version number to get more accurate information.
Retrieve IBM HCL Appscan results and document in Tines Case ManagementGet AppScan results from IBM HCL and document in Tines Case Management for visibility and vulnerability workflow management.Tools: HCL AppScan
Monitor CVE trends via Cybersixgill and alert on impacted assets in Tenable.ioMonitor emerging underground CVE trends with Cybersixgill. Examine identified CVEs against Tenable.io to identify impacted assets. If assets are affected, Slack notification is sent to Security Team to alert them.Tools: Cybersixgill, Slack, Tenable Vulnerability Management
ExploreMore stories related
