Create vulnerability assessment for zero day

Create a vulnerability assessment to evaluate and document security risks from zero day vulnerabilities in your environment. Use this when you want to assess the potential impact of newly discovered vulnerabilities that lack available patches.

Before you begin

Role required:

• System administrator (view, create or edit)
• sn_sec_tisc.admin (view)

Procedure

1. Navigate to All > Threat Intelligence Security Center > Administration.

2. Select Automated Flows.

3. Select Create vulnerability assessment for zero day vulnerabilities link to view the respective rule details in the flow designer.

   Creates vulnerability assessment based on the provided vulnerability record.

4. View the flow designer action for the following trigger:

   Vulnerability Created or Updated where (Is Zero Day is true, and Processing Status is Processed, and TISC Tags does not contain Vulnerability Assessment Created)

5. Create vulnerability assessment for vulnerability:

   1. Add tag to entity

   2. Notify the concerned TISC Teams and VR Teams.

Parent Topic:Working with automated flows

Related topics

Automated IOC Enrichment

Automated sharing of high-risk IOC's with trusted partners

Automatically add threat intelligence to a TAXII collection

Analyze, assess, and disseminate observables

Analyze and assess threat IoC’s

Vulnerability Management Support

Zero-day vulnerability tracking

Automatic Threat Actor priority tagging

Automated flows tables