Service Graph Connector for Qualys APIs
Data from the Qualys data source fields is imported with the Global Asset API and the Asset Management and Tagging API.
- A Qualys Cybersecurity Asset Management (CSAM) license is required.
- Asset information includes details such as Hardware Category and OS Category.
- A CSAM license is not required
- Asset information does not include details about Hardware Category and OS Category.
Mapped attributes
The following table compares what data is imported by the two APIs. The sections after the table list data imported by the Global asset API that is not supported by the Asset Management and Tagging API.
| Global Asset API | Asset Management and Tagging API |
|---|---|
| Mapped
attributes assetId assetUUID hostId lastModifiedDate agentId createdDate sensorLastUpdatedDate assetType address dnsName assetName netbiosName timeZone biosDescription lastBoot totalMemory cpuCount lastLoggedOnUser domainRole hwUUID biosSerialNumber biosAssetTag isContainerHost |
Mapped attributes created name dnsHostName fqdn os manufacturer tracking method netbios timezone network guid IsDockerHost modified lastVulnScan model cloudProvider type qwebHostId criticalSocre lastSystemBoot domain lastLogOnUser lastComplianceScan |
| AWS Cloud
details accountId availabilityZone hasAgent hostname imageId instanceId instanceState privateDNS privateIpAddress instanceType qualysScanner kernelId launchdate region.code region.name spotInstance subnetId vpcId tags.key tags.value |
AWS Cloud details instanceId privateDnsName privateIpAddress instanceState monitoringEnabled region accountId availabilityZone instance_type AWS Cloud tag details
|
| MS Azure Cloud
details vmId state name imagePublisher imageVersion offer location platform resourceGroupName size subnet subscriptionId virtualNetwork |
MS Azure Cloud details resourceGroupName vmId state subscriptionId location image_id publisher version offer vm_size subnet_id vpc_id MS Azure
Cloud tag details
|
| Network interface
details hostname addressIpV4 addressIpV6 macAddress interfaceName dnsAddress gatewayAddress manufacturer macVendorIntroDate netmask addresses |
Network interface details address host_name interface_name macAddress gatewayAddress interface_id type |
| Software details token1 token2 uniqueKey publisher installDate id installPath lastUseDate authorization authorizationDetectionScore |
Software details version name |
| Volume details name free size |
Volume details name free size |
| Open port details port description protocol detectedService firstFound lastUpdated |
Open port details port protocol serviceName service_id |
| Processor details description speed numCPUs noOfSocket threadsPerCore coresPerSocket multithreadingStatus |
Processor details name speed |
| Tag details tagId tagName foregroundColor backgroundColor businessImpact criticalityScore |
Asset tag details id name |
| Agent details version configurationProfile activations connectedFrom lastActivity lastCheckedIn lastInventory udcManifestAssigned errorStatus |
Agent details agentVersion agentLastCheckIn status platform connectedFrom agentId AgentConfigurationName ChirpStatus |
Additional Global asset API details
The following sections list data imported by the Global asset API that is not supported by the Asset Management and Tagging API.
Global asset API OS details
- fullName
- version
- publisher
- osName
- category
- category1
- category2
- productName
- edition
- marketVersion
- update
- architecture
- productUrl
- productFamily
- installDate
- release
Global asset API OS lifecycle
- gaDate
- eolDate
- eosDate
- stage
- lifeCycleConfidence
- eolSupportStage
- eosSupportStage
Global asset API OS taxonomy
- id
- name
- category1
- category2
Global asset API hardware
- fullName
- category
- category1
- category2
- manufacturer
- productName
- model
- productUrl
- productFamily
Global asset API hardware lifecycle
- introDate
- gaDate
- eosDate
- obsoleteDate
- stage
- lifeCycleConfidence
Global asset API taxonomy
- id
- name
- category1
- category2
Global asset API sensor
- activatedForModules
- pendingActivationForModules
- lastVMScan
- lastComplianceScan
- lastFullScan
- lastVmScanDateScanner
- lastVmScanDateAgent
- lastPcScanDateScanner
- lastPcScanDateAgent
- firstEasmScanDate
- lastEasmScanDate
Global asset API service
- name
- status
- description
Global asset API last location
- city
- state
- country
- name
- continent
- postal
Global asset API criticality
- score
- isDefault
- lastUpdated
Global asset API processor
- description
- speed
- numCPUs
- noOfSocket
- threadsPerCore
- coresPerSocket
- multithreadingStatus
Global asset API business information
- businessAppListData
- riskScore
- passiveSensor
- domain
- subdomain
- missingSoftware
- whois
- organizationName
- isp
- asn
- easmTags
- hostingCategory1
- customAttributes