topic Re: Can we combine 2 Investigate Query types like "Asset" and "Vulnerability"? in Prisma Cloud Discussions

Can we combine 2 Investigate Query types like "Asset" and "Vulnerability"?

JHenry — Mon, 15 Jan 2024 22:25:46 GMT

Hello,

I'd like to look up all Critical and High vulnerabilities that are Patchable and Exploitable in a Cloud Account with a certain Asset type. I see that if I pick the "Vulnerability" query type with Risk factors - Patchable and Exploitable, it doesn't let me pick the Cloud Accounts that I want.

In addition to that, I'd like to generate this report so I can send to the Cloud Account owners so it's easy to let them know the exact CVEs and their patches.

Thank you,

Jennifer

Re: Can we combine 2 Investigate Query types like "Asset" and "Vulnerability"?

CloudEngineer — Tue, 16 Jan 2024 18:54:16 GMT

Hi Jennifer,

Your observation is correct. Today we can't query all of that data from Assets or Vulnerabilities, or join the results in some way. At least not by default. I was able to confirm that it will be possible in future since more features or filters, etc will be added to asset queries. However, I don't have any ETA.

Right now, it would take some custom scripting to get results from more than one API call, and then cross reference results depending on on which fields the results have in common, etc.

Regards,