hello!
I am trying to generate a bi-weekly report that shows all the software with a last installation date. I am fairly new to my organization and this is the first time I am using rapid7.
please walk me through the basics of setting up a custom report as the templates are not exactly what is what I need
thank you in advance.
thank you
Welcome to Rapid7.
The channel you posted this in is for our Security Orchestration Automation and Response(SOAR) product InsightConnect. Can you give me some more details about your desired goals?
InsightConnect can connect your various tools together to accomplish various tasks. We call these Workflows.
A workflow starts out with a triggering event. As an example, a time based trigger, such as every two weeks start a workflow.
Next we would want to connect to whatever system is giving you this data. Examples might be Automox, InsightVM, Microsoft Defender.
If this is just a customized report within InsightVM you might try and start there. You can use SQL to create a custom report. Here are examples of SQL query’s to get you started.
If your question was about InsightVM and not InsightConnect you can ask the question again in Discuss, just make sure to choose InsightVM as the category.
insightVM platform, WAREHOUSE and NeXpose Postgres doesnt give you the installation date, just what is installed FYI…
Is there any way to differentiate software install dates other than, searching for duplicates on a report?
the actual Installation date of a piece of software is not available anywhere in the InsightPlatform in any data set.
what about first detected?
First detected would tell you when it first found a vulnerability against that piece of software which does not necessarily correlate to when it was installed.
I believe that the only way that first detected would be accurate would be if:
Good luck in your quest.