Rapid 7 InsightVM - Integration

• Overview
• Video Overview
• Integration Architecture
• Configuration
• Administration and Operations

Overview

The Rapid 7 integration offers a custom tag to flag a host as Data Attack Surface host.  This customer tag allows dashboards to report on the Data Attack surface assets as well as build a custom site scan schedule for hosts that are dynamically discovered by the Superna Data Attack Surface Manager .  A Data Attack Surface site is created to schedule scans on high risk hosts with a customer schedule.  CVE scan results are fully integrated into the AI prediction model within Superna Data Attack Surface Manager 

Video Overview

Integration Architecture

Configuration

1. The integration requires API access to the InsightVM,  once the integration is completed a new Superna Data Attack Surface site is configured to aggregate data risk score hosts discovered by Superna Data Attack Surface Manager. 
2. The configuration files require the following information to authenticate to the InsightVM
   1. # Configuration
      USERNAME = "XXXX"
      PASSWORD = "YYY"
      INSIGHTVM_HOST = "https://X.X.X.X:3780"
3. The scheduled scan data retrieval will be automated by DASM to build the AI model training data.   The results of the AI model will be published into the Sites list of assets.  The schedule scan schedule on the site will ensure that all Data Attack Surface hosts are scanned for vulnerabilities.
4. Each new Data Risk Score host will be synced to the Site named Superna Data Attack Surface. In addition these assets will have a custom tag applied called cyberstorage.  This allows filtering reports and dynamic assets with the custom tag. 

Administration and Operations

1. Site Management of the Data Attack Surface
   1. The Superna Data Attack Surface Site Configuration will look like the screenshot below.
   2.  
   3. The assets tab is managed by DASM dynamically using the results of the AI model.
2. Dynamic Asset Group based on custom tag
   1.  
   2. 
   3. 
3. View Vulnerability Trending of the Data Attack Surface Over time
   1. 
4. Reporting and Analysis of the Data Attack Surface Risks
   1. 
   2.