I am trying to write a surface command query that returns vulnerabilities - it returns vulnerability, finding, and asset data. If a vulnerability has a exception I need to know that because my surface command query feeds a workflow that creates jira tickets. the ticket needs to signify there is a risk acceptance in place.
I have two questions:
-
am I able to query exception data in related to a vulnerability? If so is there an example query or the entity data for relationship? I tried going through model inspector
-
in IVM, if there is an exception and I use Surface command to query IVM would the exception be returned? I am asking because once a vulnerability has an exception it no longer is displayed in IVM?
If i am barking up the wrong tree or just going the wrong direction, please let me know.