Ron Giesman

Custom OVAL checks don't work with Dynamic Asset Tags

Discussion created by Ron Giesman on Jun 24, 2016

I recently created a custom OVAL check to detect our enterprise server build via a registry check.  The detection works great, and I can see the custom QID in the host records.  When attempting to build an asset tag for the custom QID, however, it returns nothing.  I have tried several tag rule methods: Vuln(QID) Exist, Asset Search, and even Groovy.  None of them return any host assets with the custom QID.

 

Anyone else have this issue?

Outcomes