Obsolete_softwares

InsightVM
1

Hello, I would like to get the percentage of obsolescence for each asset : how many softwares are obsolet for each asset, Rapid7 shows a dashboard with the percentage of assets that have known obsolete softwares, but I would like to know for each asset, how many softwares are obsolete ? please help.

2

Something like this in a SQL export report, then exported to CSV, opened in Excel and pivotted might help get you started. It’s an old example I no longer use so could need a tweak. It excludes specific examples of OS etc, but you can add\remove as required. You could also use the category fields to look for obsolete instead of the title.

SELECT
da.host_name,
da.ip_address,
nexpose_id,
title,
proofAsText(description) AS description,
date_published
FROM
fact_asset_vulnerability_finding favf
JOIN dim_asset da using (asset_id)
JOIN dim_vulnerability dv using (vulnerability_id)
WHERE
(title LIKE '%obsolete%' OR title LIKE '%Obsolete%') AND
title NOT LIKE '%MSXML%' AND
nexpose_id NOT IN (
'windows-10-obsolete',
'windows-11-obsolete',
'windows-7-obsolete',
'windows-8-obsolete',
'windows-2003-server-obsolete',
'windows-2008-server-obsolete',
'windows-2012-server-obsolete',
'windows-xp-obsolete',
)

ORDER BY
host_name

3

This SQL export is creating an error.

4