Skip to main content

Cyware Orchestrate

RiskSense

App Vendor: Ivanti

App Category: Vulnerability Management

Connector Version: 1.1.0

API Version: 1.0.0

About App

This connector is intended to interact with the Ivanti RiskSense platform.

The RiskSense app is configured with the Orchestrate to perform the following actions:

Action Name

Description

Get Client List

This action retrieves a list all the clients.

Get Host Findings

This action performs a search for host findings.

List Host Finding Filters

This action retrieves a list fields that can be filtered by in the search endpoint.

Get App Findings

This action performs a search for all the application findings.

List Host Findings Projections

This action retrieves list projections and their models.

Get App Findings Filter

This action lists fields that can be filtered in the search endpoint.

Configuration Parameters

The following configuration parameters are required for the RiskSense app to communicate with the RiskSense enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base URL

Enter the URL for the RiskSense platform.

Example:

"https://app.exampledomain.io"

Text

Optional

API Key

Enter the API key to use for authentication.

Password

Optional

Action: Get Client List

This action lists all the clients.

Action Input Parameters

There are no input parameters required for this action.

Action: Get Host Findings

This action performs a search for host findings.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filters

Enter a list of filter objects to search for host findings.

Example:

$JSON[[{"field":"id", "exclusive": false, "operator": "IN", "value": "1,2,3,4"}]]

Any

Required

Allowed parameters:

  • field

  • exclusive

  • operator

  • value

  • platform

  • key

  • cli_id

Projection

Enter the amount of projection details.

Example:

"detail"

Text

Required

Allowed values:

  • detail

  • basic

Sort fields

Enter a list of sort parameter objects.

Example:

$JSON[[{"field":"id","direction":"ASC"}]]

List

Required

Page

Enter the starting page for your search.

Example:

20

Integer

Optional

Default value: 0

Size

Enter the number of results to be returned.

Example:

25

Integer

Optional

Default value: 20

Example Request

[
    {
        "page": 20,
        "size": 25,
        "filters": [
            {
                "field": "source",
                "value": "NESSUS",
                "operator": "EXACT",
                "exclusive": false
            }
        ],
        "projection": "detail",
        "sort_fields": [
            {
                "field": "id",
                "direction": "ASC"
            }
        ]
    }
]
Action: List Host Finding Filters

This action lists the fields that can be filtered by in the search endpoint.

Action Input Parameters

There are no input parameters required for this action.

Action: Get App Findings

This action searches for all the application findings.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filters

Enter a list of filter objects to search for the application findings.

Example:

$JSON[[{"field": "asset_tags","value": "sample ","operator": "EXACT","exclusive": "false"}]]

Any

Required

Projection

Enter the amount of projection details.

Example:

"detail"

Text

Required

Allowed Values:

  • detail

  • basic

Sort fields

Enter a list of sort parameter objects. Example: $JSON[[{"field":"id","direction":"ASC"}]]

Any

Required

Page

Enter the starting page for your search.

Example:

20

Integer

Optional

Default value: 0

Size

Enter the number of results to be returned.

Example:

50

Integer

Optional

Default value: 20

Example Request

[
    {
        "page": 20,
        "size": 50,
        "filters": [
            {
                "field": "asset_tags",
                "value": "sample",
                "operator": "EXACT",
                "exclusive": false
            }
        ],
        "projection": "detail",
        "sort_fields": [
            {
                "field": "id",
                "direction": "ASC"
            }
        ]
    }
]
Action: List Host Findings Projections

This action lists projections and their models.

Action Input Parameters

There are no input parameters required for this action.

Action: Get App Findings Filter

This action lists fields that can be filtered in the search endpoint.

Action Input Parameters

There are no input parameters required for this action.