OPENVAS SECURITY INTELLIGENCE – User Manual

This is the user manual for OPENVAS SECURITY INTELLIGENCE.

OPENVAS SECURITY INTELLIGENCE is under constant development. This user manual attempts to always document the latest version. It is, however, possible that latest functionalities have not been captured in this manual.

Should you have additional notes or error corrections for this user manual, contact the Greenbone Support Team.

The copyright for this user manual is held by the Greenbone AG. The license information for the feeds used by Greenbone products can be found at https://www.greenbone.net/en/license-information/. Greenbone and the Greenbone logo are registered trademarks of the Greenbone AG. Other logos and registered trademarks used within this user manual are the property of their respective owners and are used only for explanatory purposes.

This user manual is made available under the Creative Commons Attribution-ShareAlike 4.0 International license. See https://creativecommons.org/licenses/by-sa/4.0/ for details.

Under this license, you are free to:

• Share — copy and redistribute the material in any medium or format

• Adapt — remix, transform, and build upon the material for any purpose, even commercially

Under the following terms:

• Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests Greenbone AG endorses you or your use.

• ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original.

• No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

Greenbone AG

Neumarkt 12

49074 Osnabrück

Germany

https://www.greenbone.net/en/

• 1 Introduction
  • 1.1 Vulnerability Management
  • 1.2 OPENVAS SECURITY INTELLIGENCE
    • 1.2.1 Scan Data from Connected Appliances
    • 1.2.2 Security Information
    • 1.2.3 Appliance Management
• 2 Read Before Use
  • 2.1 SBOMs
  • 2.2 CSAF Sources
  • 2.3 SCAN Reports
  • 2.4 Technology Previews
  • 2.5 Tenancy Model
• 3 Setting up OPENVAS SECURITY INTELLIGENCE
  • 3.1 Deploying OPENVAS SECURITY INTELLIGENCE
  • 3.2 Initially Signing in as the Super Admin
• 4 Managing Users
  • 4.1 Roles
  • 4.2 Users
    • 4.2.1 Viewing Users
    • 4.2.2 Adding a User
    • 4.2.3 Editing a User
    • 4.2.4 Deleting a User
    • 4.2.5 Resetting the Password of a User
  • 4.3 Groups
    • 4.3.1 Creating a Group
    • 4.3.2 Editing a Group
    • 4.3.3 Deleting a Group
    • 4.3.4 Adding Users to a Group
    • 4.3.5 Removing Users from a Group
  • 4.4 Configuring the Password Policy
• 5 Using OPENVAS SECURITY INTELLIGENCE
  • 5.1 Supported Web Browsers
  • 5.2 Signing in to OPENVAS SECURITY INTELLIGENCE
  • 5.3 Updating the Meta Feed
  • 5.4 Filtering the Page Content
    • 5.4.1 Applying a Filter
    • 5.4.2 Saving Filters
      • 5.4.2.1 Updating Saved Filters
      • 5.4.2.2 Deleting Saved Filters
    • 5.4.3 Overview of all Filter Options
  • 5.5 Enabling the Automatic Removal of Assets
  • 5.6 Using Alerts
    • 5.6.1 Setting up a Communication Channel
      • 5.6.1.1 Configuring a Mail Server
      • 5.6.1.2 Configuring a Microsoft Teams Webbhook
      • 5.6.1.3 Configuring a Mattermost Webhook
    • 5.6.2 Creating an Alert
    • 5.6.3 Managing Alerts
  • 5.7 Managing the User Settings
    • 5.7.1 Changing the Language
    • 5.7.2 Changing the Theme
    • 5.7.3 Changing the Password
    • 5.7.4 Setting up Two-Factor Authentication
    • 5.7.5 Deleting Two-Factor Authentication
  • 5.8 Opening the User Manual
  • 5.9 Signing Out of OPENVAS SECURITY INTELLIGENCE
• 6 Importing and Analyzing Data from Appliances
  • 6.1 Importing Data
    • 6.1.1 Preparing the Appliance
      • 6.1.1.1 Connection Requirements
      • 6.1.1.2 Tagging Scan Tasks
    • 6.1.2 Connecting an Appliance to OPENVAS SECURITY INTELLIGENCE
    • 6.1.3 Importing Data from an Appliance
    • 6.1.4 Managing All Connected Appliances
      • 6.1.4.1 Viewing All Connected Appliances
      • 6.1.4.2 Editing an Appliance
      • 6.1.4.3 Deleting an Appliance
  • 6.2 Analyzing Data
    • 6.2.1 Using the Dashboard
      • 6.2.1.1 Dashboard Structure
      • 6.2.1.2 Filtering the Dashboard Content
      • 6.2.1.3 Exporting Reports from the Dashboard View
    • 6.2.2 Managing Assets
      • 6.2.2.1 Creating Assets
      • 6.2.2.2 Viewing Assets
      • 6.2.2.3 Filtering Assets
      • 6.2.2.4 Exporting Assets
      • 6.2.2.5 Deleting Assets
    • 6.2.3 Using Tags
      • 6.2.3.1 Differences in Tags Between OPENVAS SCAN and OPENVAS SECURITY INTELLIGENCE
      • 6.2.3.2 Creating Tags
      • 6.2.3.3 Using Tagging Rules
      • 6.2.3.4 Removing Tags from Assets
      • 6.2.3.5 Filtering for Tags
    • 6.2.4 Managing Vulnerabilities
      • 6.2.4.1 Viewing Vulnerabilities
      • 6.2.4.2 Filtering Vulnerabilities
      • 6.2.4.3 Exporting Vulnerabilities
      • 6.2.4.4 Quality of Detection (QoD) Concept
• 7 Managing Appliances
  • 7.1 Connecting Appliances
    • 7.1.1 Preparing the Appliance
      • 7.1.1.1 Preparing the Appliance for Inbound Mode
      • 7.1.1.2 Preparing the Appliance for Outbound Mode
    • 7.1.2 Connecting from OPENVAS SECURITY INTELLIGENCE to the Appliance
    • 7.1.3 Connecting from the Appliance to OPENVAS SECURITY INTELLIGENCE
    • 7.1.4 Information about Disconnecting Appliances
  • 7.2 Viewing Appliances
    • 7.2.1 Viewing the Overvall List of Appliances
    • 7.2.2 Viewing Appliance Details
  • 7.3 Managing a Single Appliance
    • 7.3.1 Editing an Appliance
    • 7.3.2 Deleting an Appliance
    • 7.3.3 Cloning an Appliance
    • 7.3.4 Configuring SSH on an Appliance
      • 7.3.4.1 Enabling or Disabling SSH
      • 7.3.4.2 Copying the SSH Access Command
    • 7.3.5 Shutting Down an Appliance
    • 7.3.6 Rebooting an Appliance
    • 7.3.7 Pairing an Appliance
    • 7.3.8 Unpairing an Appliance
    • 7.3.9 Upgrading GOS on an Appliance
    • 7.3.10 Updating the Feed on an Appliance
    • 7.3.11 Running a Self-Check on an Appliance
    • 7.3.12 Using a Support Package on an Appliance
      • 7.3.12.1 Creating a Support Package on an Appliance
      • 7.3.12.2 Downloading a Support Package from an Appliance
      • 7.3.12.3 Deleting a Support Package from an Appliance
  • 7.4 Managing Multiple Appliances
    • 7.4.1 Cloning Multiple Appliances
    • 7.4.2 Deleting Multiple Appliances
    • 7.4.3 Rebooting Multiple Appliances
    • 7.4.4 Shutting Down Multiple Appliances
    • 7.4.5 Upgrading GOS on Multiple Appliances
    • 7.4.6 Updating the Feed on Multiple Appliances
    • 7.4.7 Using Support Packages on Multiple Appliances
      • 7.4.7.1 Creating Support Packages on Multiple Appliances
      • 7.4.7.2 Downloading Support Packages from Multiple Appliances
      • 7.4.7.3 Deleting Support Packages from Multiple Appliances
    • 7.4.8 Running a Self-Check on Multiple Appliances
• 8 Viewing and Analyzing Security Information
  • 8.1 Managing CVEs
    • 8.1.1 Viewing CVEs
      • 8.1.1.1 Viewing the Overall List of CVEs
      • 8.1.1.2 Viewing CVE Details
    • 8.1.2 Filtering CVEs
  • 8.2 Managing CSAF Documents
    • 8.2.1 Viewing CSAF Documents
      • 8.2.1.1 Viewing the Overall List of CSAF Documents
      • 8.2.1.2 Viewing CSAF Document Details
    • 8.2.2 Filtering CSAF Documents
  • 8.3 Managing CPE
    • 8.3.1 Viewing CPEs
      • 8.3.1.1 Viewing the Overall List of CPEs
      • 8.3.1.2 Viewing CPE Details
    • 8.3.2 Filtering CPEs
  • 8.4 Managing Vulnerability Tests
    • 8.4.1 Viewing Vulnerability Tests
      • 8.4.1.1 Viewing the Overall List of Vulnerability Tests
      • 8.4.1.2 Viewing Vulnerability Test Details
    • 8.4.2 Filtering Vulnerability Tests
  • 8.5 Managing SBOMs
    • 8.5.1 Adding SBOMs
    • 8.5.2 Viewing SBOMs
    • 8.5.3 Scanning SBOMs
      • 8.5.3.1 Viewing SBOM Scans
      • 8.5.3.2 Executing an SBOM Scan
      • 8.5.3.3 Viewing the Report of an SBOM Scan
    • 8.5.4 Editing SBOMs
    • 8.5.5 Deleting SBOMs
    • 8.5.6 Copying the CPE Name of the Main Product
    • 8.5.7 Filtering SBOMs
  • 8.6 Managing SCAN Reports
    • 8.6.1 Adding SCAN Reports
    • 8.6.2 Viewing SCAN Reports
    • 8.6.3 Scanning SCAN Reports
      • 8.6.3.1 Executing a SCAN Report Scan
      • 8.6.3.2 Viewing the Report of a SCAN Report Scan
    • 8.6.4 Editing SCAN Reports
    • 8.6.5 Deleting SCAN Reports
    • 8.6.6 Exporting the Report of a SCAN Report Scan
    • 8.6.7 Filtering SCAN Reports
  • 8.7 Managing CSAF Sources
    • 8.7.1 Adding CSAF Sources
    • 8.7.2 Viewing CSAF Sources
    • 8.7.3 Editing CSAF Sources
    • 8.7.4 Deleting CSAF Sources
    • 8.7.5 Downloading Documents from a CSAF Source
    • 8.7.6 Filtering CSAF Sources
• 9 Using Notifications
  • 9.1 Viewing Notifications
  • 9.2 Filtering Notifications
• 10 Glossary
  • 10.1 Asset
  • 10.2 CSAF
  • 10.3 CPE
  • 10.4 CVE
  • 10.5 CVSS
  • 10.6 EPSS
  • 10.7 Vulnerability Test (VT)
  • 10.8 Quality of Detection (QoD)
  • 10.9 SBOM
  • 10.10 Severity
  • 10.11 Solution Type

Indices

• Index

• Search Page