Dear All,
Do we have any guide from Qualys to get started on groovy scriptlet writing specific to QualysGuard objects (like the functions, properties, keywords, syntaxes etc...)
If there is no such document then any reference to online training session would be helpful.
Thanks & stay secure,
Somen
Dear Nick,
We contacted Qualys support on this. To write groovy scripts you would need reference to the built-in types for Qualys objects to be able to use them per your logic. As stated in my 1st response. But that is not been provided yet. Per support it's a fairly rare use case that there is a need for Groovy tags to be used...
Instead we were advised of using RegEx & QID combinations. And then grouping them under a parent tag... For me/us some how playing with RegEx & QID worked to accomplish the scenarios of :
Dynamically tagging hostnames, Grouping specific QIDs under Application Vulnerability, and some other.
I would recommend you to check out the RegEx option first before you look to write your own groovy tags.
But yes if the interanl reference types can be documented & shared that might help for advance cases.
If you can post your requirement then I can try helping you out...
Thanks & stay secure,
Somen
Security - Begin at the beginning
Old thread, bumping in case there are any updates on this?
I have a document that gives some examples on this; can you give me an example of what your trying to solve?
Thanks Busby, I wanted to get a list of assets (dynamic) with Confirmed Sev 5. Was planning to use it on an asset tag and then create a dashboard for critical assets.
I have groovy scripts for all sev 5 (potential+confirmed), so looking to drill down a bit more to get only confirmed vulns.
Thanks,
https://community.qualys.com/message/40968-groovy-scriptlet-to-find-assets-not-in-a-module
I had several assets added via API that should not have been. I am now trying to write a groovy tag for assets that are not in the VM or WAS modules so I can remove them via the API. I could sure use the documentation you have on what methods are available.
Hi Somen-
did you get any documentation for this? I'm exploring the same area, and all I can find are some samples supplied by our TAM. I've put a request into Qualys Support so there's a record of it being asked for.
Thanks,
Nick