Qualys Security integration pack

Read API Documentation for vendor details.

Configuration

Copy the example configuration in qualys.yaml.example to /opt/stackstorm/configs/qualys.yaml and edit as required.

It has three entries:

• hostname The host of the Qualys API serivce
• username User to the API
• password Password to the API

It should look like this:

---
hostname: qualysapi.serviceprovider.com
username: jerry
password: I<3Elaine

Note : When modifying the configuration in /opt/stackstorm/configs/ please remember to tell StackStorm to load these new values by running st2ctl reload --register-configs

Actions

• add_host Add host to vulnerability management, policy compliance, or both.
• add_hosts Add hosts to vulnerability management, policy compliance, or both.
• get_host Get the status of a host, e.g. last scanned, NETBIOS details
• get_host_range Get the status of an IP range of hosts
• get_report Get the status and content of a scan report
• launch_scan Launch a scan on a host
• list_hosts_not_scanned List the hosts that have not been scanned in a number of days
• list_reports List completed, available reports
• list_scans List scans