PrismaCloudComputeParseVulnerabilityAlert
This Script is part of the Prisma Cloud Compute by Palo Alto Networks Pack.#
Supported versions
Available on Cortex XSOAR and Cortex XSIAM.
Parse Vulnerability alert raw JSON data
Script Data#
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | Prisma Cloud Compute |
| Cortex XSOAR Version | 5.0.0 |
Used In#
This script is used in the following playbooks and scripts.
- Prisma Cloud Compute - Vulnerability Alert
Inputs#
| Argument Name | Description |
|---|---|
| alert_raw_json | The vulneribility alert raw JSON data |
Outputs#
| Path | Description | Type |
|---|---|---|
| PrismaCloudCompute.VulnerabilityAlert.time | Vulnerability discovery time | Date |
| PrismaCloudCompute.VulnerabilityAlert.imageName | Impacted image name | String |
| PrismaCloudCompute.VulnerabilityAlert.distroName | Full name of the image distribution | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.cve | CVE ID of the vulnerability | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.severity | The Severity of the vulnerability | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.link | The CVE vendor link | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.status | The CVE vendor status | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.packages | Package names | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.packageVersion | The version of the package that caused the vulnerability | String |
| PrismaCloudCompute.VulnerabilityAlert.vulnerabilities.sourcePackage | The name of the source package if such package exist, for os packages, source package is the package used to build the binary | String |