{"users":[{"id":1427,"username":"Eric-Wilson","name":"Eric Wilson","avatar_template":"/user_avatar/discuss.rapid7.com/eric-wilson/{size}/2531_2.png","admin":true,"moderator":true,"trust_level":4},{"id":44932,"username":"watch22","name":"","avatar_template":"/letter_avatar_proxy/v4/letter/w/3ab097/{size}.png","trust_level":1},{"id":55599,"username":"dave_mc","name":"","avatar_template":"/letter_avatar_proxy/v4/letter/d/b5e925/{size}.png","trust_level":1},{"id":45222,"username":"jee_chung","name":"Jee Chung","avatar_template":"/letter_avatar_proxy/v4/letter/j/d9b06d/{size}.png","trust_level":1},{"id":49618,"username":"flobmeyer","name":"flobmeyer","avatar_template":"/letter_avatar_proxy/v4/letter/f/a9a28c/{size}.png","trust_level":1},{"id":43482,"username":"hugh_pyle","name":"Hugh Pyle","avatar_template":"/letter_avatar_proxy/v4/letter/h/858c86/{size}.png","trust_level":1},{"id":49982,"username":"jlai1","name":"jlai","avatar_template":"/letter_avatar_proxy/v4/letter/j/58f4c7/{size}.png","trust_level":1},{"id":18128,"username":"tward1","name":"tward","avatar_template":"/letter_avatar_proxy/v4/letter/t/e9bcb4/{size}.png","trust_level":1},{"id":4581,"username":"john_woodling","name":"John Woodling","avatar_template":"/letter_avatar_proxy/v4/letter/j/3d9bf3/{size}.png","trust_level":2},{"id":51757,"username":"bh1","name":"Ben","avatar_template":"/letter_avatar_proxy/v4/letter/b/f17d59/{size}.png","trust_level":1},{"id":51365,"username":"agregg","name":"agregg","avatar_template":"/letter_avatar_proxy/v4/letter/a/e47774/{size}.png","trust_level":1},{"id":50171,"username":"jee_chung1","name":"Jee Chung","avatar_template":"/letter_avatar_proxy/v4/letter/j/ac8455/{size}.png","trust_level":1},{"id":50003,"username":"amiah","name":"amiah","avatar_template":"/letter_avatar_proxy/v4/letter/a/f0a364/{size}.png","trust_level":1},{"id":45746,"username":"brian_richer1","name":"Brian Richer","avatar_template":"/letter_avatar_proxy/v4/letter/b/7cd45c/{size}.png","trust_level":1},{"id":33545,"username":"dblack","name":"dblack","avatar_template":"/letter_avatar_proxy/v4/letter/d/c89c15/{size}.png","trust_level":1},{"id":46561,"username":"jee_chung_mca","name":"Jee Chung","avatar_template":"/letter_avatar_proxy/v4/letter/j/a587f6/{size}.png","trust_level":1},{"id":504,"username":"matt_wyen","name":"Matt Wyen","avatar_template":"/user_avatar/discuss.rapid7.com/matt_wyen/{size}/2749_2.png","trust_level":2},{"id":2603,"username":"nick_graves","name":"Nick Graves","avatar_template":"/letter_avatar_proxy/v4/letter/n/e0b2c6/{size}.png","trust_level":1},{"id":46066,"username":"JeraldT","name":"Jerald Tolivar","avatar_template":"/user_avatar/discuss.rapid7.com/jeraldt/{size}/2630_2.png","trust_level":1},{"id":904,"username":"vanessa_villalpando","name":"Vanessa Villalpando","avatar_template":"/letter_avatar_proxy/v4/letter/v/dec6dc/{size}.png","trust_level":2},{"id":44787,"username":"mark_mcginnigle1","name":"Mark Mcginnigle","avatar_template":"/letter_avatar_proxy/v4/letter/m/c57346/{size}.png","trust_level":1},{"id":15696,"username":"rockchav","name":"rock chav","avatar_template":"/letter_avatar_proxy/v4/letter/r/c77e96/{size}.png","trust_level":1},{"id":49899,"username":"marty_james","name":"Marty James","avatar_template":"/letter_avatar_proxy/v4/letter/m/dbc845/{size}.png","trust_level":1},{"id":45307,"username":"JustinAR","name":"","avatar_template":"/letter_avatar_proxy/v4/letter/j/8edcca/{size}.png","trust_level":2},{"id":43261,"username":"sul_fazal","name":"Saad Ul Fazal","avatar_template":"/letter_avatar_proxy/v4/letter/s/df788c/{size}.png","trust_level":1},{"id":44080,"username":"jausburn","name":"jausburn","avatar_template":"/letter_avatar_proxy/v4/letter/j/59ef9b/{size}.png","trust_level":1},{"id":45473,"username":"jhasty","name":"jhasty","avatar_template":"/letter_avatar_proxy/v4/letter/j/aeb1de/{size}.png","trust_level":1},{"id":47961,"username":"AU_3063","name":"","avatar_template":"/letter_avatar_proxy/v4/letter/a/73ab20/{size}.png","trust_level":1}],"primary_groups":[],"flair_groups":[],"topic_list":{"can_create_topic":false,"more_topics_url":"/c/surface-command/47?page=1","per_page":30,"top_tags":["InsightConnect","crowdstrike_falcon","dashboards","InsightIDR","InsightVM","plugin-requests","queries","sql","workflow-building","workflows"],"topics":[{"fancy_title":"About the Surface Command category","id":44675,"title":"About the Surface Command category","slug":"about-the-surface-command-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-11-07T13:13:04.693Z","last_posted_at":"2024-11-07T13:13:04.699Z","bumped":true,"bumped_at":"2024-11-12T13:01:00.772Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"The place for topics surrounding Surface Command, including connectors, queries, dashboards, and even use cases to get started with. \nWe want to hear about your questions, use-cases and for you to share what you’ve built…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":120,"like_count":0,"has_summary":false,"last_poster_username":"Eric-Wilson","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":1427,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"SCCM Connector","id":57289,"title":"SCCM Connector","slug":"sccm-connector","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-06-19T17:06:04.277Z","last_posted_at":"2026-06-19T17:06:04.362Z","bumped":true,"bumped_at":"2026-06-19T17:06:04.362Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"We are running the Rapid7 Microsoft SCCM connector microsoft.sccm.app version 1.23.2431. \nSCCM AdminService works from a domain-joined Windows device using the same service account and returns data from /AdminService/wmi…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":51,"like_count":0,"has_summary":false,"last_poster_username":"watch22","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":44932,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Red Hat Satellite Connector","id":57232,"title":"Red Hat Satellite Connector","slug":"red-hat-satellite-connector","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-05-19T18:47:04.095Z","last_posted_at":"2026-06-12T13:15:05.280Z","bumped":true,"bumped_at":"2026-06-12T13:15:05.280Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"We are trying to use the Red Hat Satellite connector to connect and extract the information from Red Hat Satellite 6.17.5 but we are getting schema validations errors. What versions of Red Hat satellite does the Rapid7 S…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":94,"like_count":0,"has_summary":false,"last_poster_username":"jee_chung","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":55599,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":45222,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Surface Command Connector documentation (really all products)","id":57259,"title":"Surface Command Connector documentation (really all products)","slug":"surface-command-connector-documentation-really-all-products","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-06-04T15:48:00.688Z","last_posted_at":"2026-06-08T15:10:49.985Z","bumped":true,"bumped_at":"2026-06-08T15:10:49.985Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"It would be nice if someone went through and updated all the public facing documentation.  Is it so hard to put screenshots in for everything?  Products change and your language is not always accurate. \nIt would also be …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":104,"like_count":0,"has_summary":false,"last_poster_username":"hugh_pyle","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":49618,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":43482,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Remove Domain and Certificate in Attack Surface Management ( EASM )","id":57254,"title":"Remove Domain and Certificate in Attack Surface Management ( EASM )","slug":"remove-domain-and-certificate-in-attack-surface-management-easm","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-06-03T01:57:44.984Z","last_posted_at":"2026-06-03T14:06:27.528Z","bumped":true,"bumped_at":"2026-06-03T14:06:27.528Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Hi all, \nI accidentally entered the wrong domain in the discovery seed section. But I have removed it already. I have noticed the related domains and certificates still remain there and I can’t remove them. May I know ho…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":87,"like_count":1,"has_summary":false,"last_poster_username":"jee_chung","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":49982,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":45222,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Reporting Vulnerability Exceptions in Surface Command","id":57191,"title":"Reporting Vulnerability Exceptions in Surface Command","slug":"reporting-vulnerability-exceptions-in-surface-command","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-04-27T14:12:05.107Z","last_posted_at":"2026-04-27T14:12:05.212Z","bumped":true,"bumped_at":"2026-04-27T14:12:05.212Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I am trying to write a surface command query that returns vulnerabilities - it returns vulnerability, finding, and asset data. If a vulnerability has a exception I need to know that because my surface command query feeds…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":69,"like_count":0,"has_summary":false,"last_poster_username":"tward1","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":18128,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Crowdstrike Falcon","id":57168,"title":"Crowdstrike Falcon","slug":"crowdstrike-falcon","posts_count":5,"reply_count":3,"highest_post_number":5,"image_url":null,"created_at":"2026-04-16T07:44:33.496Z","last_posted_at":"2026-04-16T14:06:01.851Z","bumped":true,"bumped_at":"2026-04-16T14:06:01.851Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"When I try to run the import feed for CrowdStrike falcon incidents. But prompt “Failed”. \nBut encounter the below error : \n[3:33:24 pm] Calling 'get_incidents' \n[3:33:26 pm] Function get_incidents failed: [{'message': 'N…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":["crowdstrike_falcon"],"tags_descriptions":{},"views":87,"like_count":1,"has_summary":false,"last_poster_username":"jlai1","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":49982,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":43482,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":4581,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Feature Request: Support JWT Authentication for N‑able N‑central Extension (Surface Command)","id":57120,"title":"Feature Request: Support JWT Authentication for N‑able N‑central Extension (Surface Command)","slug":"feature-request-support-jwt-authentication-for-n-able-n-central-extension-surface-command","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-03-18T10:23:06.875Z","last_posted_at":"2026-03-18T13:50:48.781Z","bumped":true,"bumped_at":"2026-03-18T13:50:48.781Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Extension: N‑able N‑central \nUse case: Surface Command / InsightConnect ingestion \nExtension page: Rapid7 Extensions \nCategory: Extensions / Surface Command \nSummary\nWe are currently unable to use the N‑able N‑central ex…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":["plugin-requests"],"tags_descriptions":{},"views":51,"like_count":1,"has_summary":false,"last_poster_username":"bh1","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":51757,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":45222,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Teams Integration surface command","id":57059,"title":"Teams Integration surface command","slug":"teams-integration-surface-command","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-02-03T17:43:19.547Z","last_posted_at":"2026-02-05T14:13:25.952Z","bumped":true,"bumped_at":"2026-02-05T14:13:25.952Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Does this connector work?  It seems the connector does not send as an adaptive card so the workflows just fail. \nAnyone run into this?","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":88,"like_count":0,"has_summary":false,"last_poster_username":"agregg","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":51365,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":50171,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Surface command, vulnerability publish date as date instead of epoch","id":57039,"title":"Surface command, vulnerability publish date as date instead of epoch","slug":"surface-command-vulnerability-publish-date-as-date-instead-of-epoch","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-01-15T21:01:30.771Z","last_posted_at":"2026-01-15T21:01:30.848Z","bumped":true,"bumped_at":"2026-01-15T21:01:30.848Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"kind of surprised this isn’t in the forums, which probably means i am missing something obvious. when i \nMATCH (rf:Finding)-->(rv:Rapid7IVMVulnerability), \n(rf)-->(ra:Rapid7IVMAsset) \nand i match rv.datePublished is retu…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":60,"like_count":0,"has_summary":false,"last_poster_username":"tward1","category_id":49,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":18128,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"DATE FOrmat change","id":56537,"title":"DATE FOrmat change","slug":"date-format-change","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-11-19T10:01:27.204Z","last_posted_at":"2025-11-19T12:40:57.481Z","bumped":true,"bumped_at":"2025-11-19T12:40:57.481Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"how do i convert a date format to “DD-MM-YYYY” or “DD/MM/YYYY” \ni have tried \n, to_char((a.endpoint_last_scanned),‘DD-MM-YYYY’) \ni have tried \n,SUBSTRING(tostring(a.endpoint_last_scanned),9,2)+‘/’+SUBSTRING(tostring(a.en…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":71,"like_count":0,"has_summary":false,"last_poster_username":"brian_richer1","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":50003,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":45746,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Sample/templated JSON file for import file","id":56180,"title":"Sample/templated JSON file for import file","slug":"sample-templated-json-file-for-import-file","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-11-05T00:07:40.914Z","last_posted_at":"2025-11-05T13:11:50.277Z","bumped":true,"bumped_at":"2025-11-05T13:11:50.277Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"I’m using the sftp connector for importing assets through json files. Rapid7 Extensions. \nI can’t find a source that explains creating a json file that is recognized by the connector. Also, I can’t locate an example json…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":81,"like_count":0,"has_summary":false,"last_poster_username":"jee_chung1","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":33545,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":50171,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Surface Command - How is “Administrator?” (is_administrator) determined?","id":54709,"title":"Surface Command - How is \"Administrator?\" (is_administrator) determined?","slug":"surface-command-how-is-administrator-is-administrator-determined","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"//forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/optimized/2X/0/0bfdc94e06b0013f1a223dec1d8913abae4dd041_2_1024x213.png","created_at":"2025-09-09T17:40:06.824Z","last_posted_at":"2025-11-03T16:51:01.541Z","bumped":true,"bumped_at":"2025-11-03T16:51:01.541Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Overview\nWhen viewing the “Identities” page in Surface Command, how is “Administrator?” determined? What does it mean when this value is True, False, or blank? \n  \nWhile this field is a boolean field, interpreting its va…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":102,"like_count":1,"has_summary":false,"last_poster_username":"matt_wyen","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":504,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Solarwinds Orion connector","id":54885,"title":"Solarwinds Orion connector","slug":"solarwinds-orion-connector","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2025-09-17T09:02:56.995Z","last_posted_at":"2025-11-03T16:48:09.157Z","bumped":true,"bumped_at":"2025-11-03T16:48:09.157Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Hi, \nTrying to setup the SolardWinds Orion  connector, however receive the following error when I test the connection: \nWhile executing function test, an error was encountered: test() missing 1 required positional argume…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":99,"like_count":0,"has_summary":false,"last_poster_username":"matt_wyen","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2603,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":45746,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":504,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"SolarWinds Orion account permissions & SSO auth","id":56113,"title":"SolarWinds Orion account permissions & SSO auth","slug":"solarwinds-orion-account-permissions-sso-auth","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-11-03T15:36:47.057Z","last_posted_at":"2025-11-03T15:36:47.119Z","bumped":true,"bumped_at":"2025-11-03T15:36:47.119Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Hello, \nWe are attempting to setup the SolarWInds Orion data import connector for Surface Command \n\n\nHowever the documentation does not clarify if active directory joined SSO accounts are usable for this such as “DOMAIN\\…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":58,"like_count":0,"has_summary":false,"last_poster_username":"matt_wyen","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":504,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"R7 Surface Command correlation log table","id":55546,"title":"R7 Surface Command correlation log table","slug":"r7-surface-command-correlation-log-table","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-10-14T08:27:37.939Z","last_posted_at":"2025-10-14T08:27:38.020Z","bumped":true,"bumped_at":"2025-10-14T08:43:49.797Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Im looking for a way (or a table) to return the linkage between the Assets Fields and how they map to source datasets. \ni need to be able to quickly trace where and how the fields for a certain asset has been derived for…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":["InsightVM","sql","queries"],"tags_descriptions":{},"views":69,"like_count":0,"has_summary":false,"last_poster_username":"amiah","category_id":49,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":50003,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Trying to get the latest patch or patches on an asset","id":55140,"title":"Trying to get the latest patch or patches on an asset","slug":"trying-to-get-the-latest-patch-or-patches-on-an-asset","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-09-26T10:12:31.723Z","last_posted_at":"2025-09-30T18:19:13.063Z","bumped":true,"bumped_at":"2025-09-30T18:19:13.063Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Is it possible to get the patches that have been applied to the asset.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":95,"like_count":0,"has_summary":false,"last_poster_username":"brian_richer1","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":50003,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":45746,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Requesting v2 API for Netskope","id":54931,"title":"Requesting v2 API for Netskope","slug":"requesting-v2-api-for-netskope","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-09-18T13:45:07.448Z","last_posted_at":"2025-09-19T11:27:09.758Z","bumped":true,"bumped_at":"2025-09-19T11:27:09.758Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Netskope API v1 has been deprecated and our Netskope account team is requesting us to utilize v2 API as they plan on ending support for v1 soonish.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":105,"like_count":0,"has_summary":false,"last_poster_username":"brian_richer1","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":46066,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":45746,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Surface command unable connect to Active Directory Connector","id":54746,"title":"Surface command unable connect to Active Directory Connector","slug":"surface-command-unable-connect-to-active-directory-connector","posts_count":8,"reply_count":5,"highest_post_number":8,"image_url":"//forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/optimized/2X/f/f7218d646ff08586c97777bd9758fef5854b5d23_2_1024x545.png","created_at":"2025-09-11T02:59:02.697Z","last_posted_at":"2025-09-19T01:42:39.930Z","bumped":true,"bumped_at":"2025-09-19T01:42:39.930Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Hi all, I am fresh at here and still in exploring stage. I am tried to set up a orchestrator to connect my on-primes Active directory server in Insight Connect. That is succeed to connect with my Active Directory.However…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":["InsightConnect"],"tags_descriptions":{},"views":142,"like_count":0,"has_summary":false,"last_poster_username":"jlai1","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":49982,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":904,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":44787,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Surface Command Asset Retention","id":54581,"title":"Surface Command Asset Retention","slug":"surface-command-asset-retention","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2025-09-04T15:00:54.276Z","last_posted_at":"2025-09-10T15:47:17.967Z","bumped":true,"bumped_at":"2025-09-10T15:47:17.967Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Anyone how long Surface Command keeps old assets? We can’t image anything right now because if we do we go over our license count, and it doesn’t look like you can even delete anything.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":144,"like_count":2,"has_summary":false,"last_poster_username":"marty_james","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":15696,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":49899,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":45307,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"RBAC for Surface Command","id":54021,"title":"RBAC for Surface Command","slug":"rbac-for-surface-command","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"//forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/optimized/2X/b/b02879fd84679b4eb4776a433bae772915d74146_2_1024x110.png","created_at":"2025-08-14T21:17:14.566Z","last_posted_at":"2025-08-14T21:17:14.628Z","bumped":true,"bumped_at":"2025-08-14T21:17:14.628Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Overview\nSurface Command offers the role-based access control capability by utilizing the roles mechanism in the Command Platform. This RBAC mechanism provides a way to limit access to features within Surface Command, bu…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":105,"like_count":1,"has_summary":false,"last_poster_username":"jee_chung_mca","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Announcing: API for querying/exporting Surface Command data","id":53943,"title":"Announcing: API for querying/exporting Surface Command data","slug":"announcing-api-for-querying-exporting-surface-command-data","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-08-12T17:37:15.502Z","last_posted_at":"2025-08-12T17:37:15.565Z","bumped":true,"bumped_at":"2025-08-12T17:37:15.565Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"You can now use an API call to query your data in Surface Command. \nKey points: \n\nRun a saved query or an ad-hoc query\nGet data back in JSON, JSONL, or CSV\nPagination is supported but optional\n\nMore information at: Query…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":120,"like_count":0,"has_summary":false,"last_poster_username":"jee_chung_mca","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Rapid7 ASM remediation of vulnerabilities","id":53368,"title":"Rapid7 ASM remediation of vulnerabilities","slug":"rapid7-asm-remediation-of-vulnerabilities","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2025-07-23T12:28:52.205Z","last_posted_at":"2025-07-28T13:15:41.744Z","bumped":true,"bumped_at":"2025-07-28T13:15:41.744Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"The vulnerabilities identified by CAASM (Cyber Asset Attack Surface Management) and EASM (External Attack Surface Management) are clearly visible on platforms like Command Surface. However, the question remains—what abou…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":238,"like_count":1,"has_summary":false,"last_poster_username":"Eric-Wilson","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":43261,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":1427,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Limit Asset Import","id":53458,"title":"Limit Asset Import","slug":"limit-asset-import","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-07-25T16:22:42.332Z","last_posted_at":"2025-07-25T16:22:42.393Z","bumped":true,"bumped_at":"2025-07-25T16:22:42.393Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Is there any way to limit the data ingested by the connector?  We need to limit the imports to a single account within NinjaRMM.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":49,"like_count":0,"has_summary":false,"last_poster_username":"jausburn","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":44080,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Is there any way through which i can show total investigations with the help of Groupby function","id":53182,"title":"Is there any way through which i can show total investigations with the help of Groupby function","slug":"is-there-any-way-through-which-i-can-show-total-investigations-with-the-help-of-groupby-function","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-07-17T09:51:22.753Z","last_posted_at":"2025-07-24T16:06:31.430Z","bumped":true,"bumped_at":"2025-07-24T16:06:31.430Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Is there any way through which i can show in graphical form total investigations in graphicial form","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":["InsightIDR"],"tags_descriptions":{},"views":108,"like_count":0,"has_summary":false,"last_poster_username":"JustinAR","category_id":50,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":43261,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":45307,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Patch Management Detection for Remediation Hub","id":53383,"title":"Patch Management Detection for Remediation Hub","slug":"patch-management-detection-for-remediation-hub","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-07-23T16:31:38.271Z","last_posted_at":"2025-07-23T16:31:38.350Z","bumped":true,"bumped_at":"2025-07-23T16:31:38.350Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"How is Remediation Hub detecting the Patch Management compensating control? Which Patch Management tools are recognized?","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":67,"like_count":0,"has_summary":false,"last_poster_username":"jhasty","category_id":48,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":45473,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Surface Command - working with Reference Lists","id":52721,"title":"Surface Command - working with Reference Lists","slug":"surface-command-working-with-reference-lists","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"//forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/original/2X/4/445fb6e85b39cb1a0f7014d5d64351d534191856.png","created_at":"2025-07-02T14:02:14.916Z","last_posted_at":"2025-07-02T14:02:14.981Z","bumped":true,"bumped_at":"2025-07-02T14:02:14.981Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Overview \nSurface Command has a feature called “Reference Lists”: \n  \nA reference list in Surface Command is a user-serviceable lookup table: \n\nUpload your data from a CSV or an Excel file.\nMeant for slowly changing data…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":247,"like_count":1,"has_summary":false,"last_poster_username":"jee_chung_mca","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Lansweeper connector","id":52580,"title":"Lansweeper connector","slug":"lansweeper-connector","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-06-27T05:58:59.755Z","last_posted_at":"2025-06-27T13:21:35.474Z","bumped":true,"bumped_at":"2025-06-27T13:21:35.474Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Hi. \nHas anyone successfully integrated Lansweeper with Rapid7 Surface Command via connectors? \nIf so, could you please share the steps? My API connection keeps failing. Thanks","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":101,"like_count":0,"has_summary":false,"last_poster_username":"jee_chung_mca","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":47961,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Example use case: Surface Command Customer Asset Risk Scoring","id":51841,"title":"Example use case: Surface Command Customer Asset Risk Scoring","slug":"example-use-case-surface-command-customer-asset-risk-scoring","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"//forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/optimized/2X/6/6dd813c610330ef95c99c028e9ba5f0ddf80c2af_2_1024x598.png","created_at":"2025-06-04T13:34:22.408Z","last_posted_at":"2025-06-04T13:34:22.468Z","bumped":true,"bumped_at":"2025-06-04T13:34:22.468Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"One of the most compelling use cases for Surface Command is to provide tool-agnostic Asset Risk Assessments by computing asset risk scores that are independent of the data sources. This way, even as the your selection of…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":248,"like_count":0,"has_summary":false,"last_poster_username":"jee_chung_mca","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Example use case: Surface Command VM Prioritization","id":51663,"title":"Example use case: Surface Command VM Prioritization","slug":"example-use-case-surface-command-vm-prioritization","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"//forum-uploads-hub-prod-1-us-east-1-rapid7-com.s3.dualstack.us-east-1.amazonaws.com/optimized/2X/6/61b749a72fd64c7610f2c26c40a97fc6009664c0_2_1024x606.jpeg","created_at":"2025-05-29T14:55:33.556Z","last_posted_at":"2025-05-29T14:55:33.620Z","bumped":true,"bumped_at":"2025-05-29T15:11:10.369Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"The below Surface Command query can highlight critical, exploitable, but fixable CVE findings on your Assets: \nMATCH (a:Machine)-->(v:Vulnerability)-->(c:CisaKnownExploitedVulnerability)\n\nWHERE SINCE(a.endpoint_last_seen…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":200,"like_count":1,"has_summary":false,"last_poster_username":"jee_chung_mca","category_id":47,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":46561,"primary_group_id":null,"flair_group_id":null}]}]}}