topic Re: XQL query for vulnerability in Cortex XDR Discussions

XQL query for vulnerability

T.Nurmi — Wed, 19 Feb 2025 13:18:12 GMT

Hi. i need to do monthly report for vulnerabilities. So how to create like a trend report for 30 days

here is just example for get count, but how to do trend report?

dataset = va_cves
| filter severity >Medium
| filter affected_hosts_count >1
| fields name, affected_products, severity
| comp count() by severity

Re: XQL query for vulnerability

aspatil — Wed, 19 Feb 2025 14:04:28 GMT

Hello @T.Nurmi m

Thanks for reaching out on LiveCommunity!

Can you confirm , what exactly do want in the trend report?

Eg. Comparison between current month and last month vulnerabilities, Top 10 CVEs, Top 10 Vulnerable Applications, Vulnerabilities on Endpoint over time

Re: XQL query for vulnerability

T.Nurmi — Wed, 19 Feb 2025 14:13:13 GMT

so what i want to see this kind report> all vulnerabilities/day