Schedule Demo
View Categories

Security & IT Ops Dashboards

The pre-built Value-Oriented Dashboards include the following Security & IT Ops dashboards:

  • Certificate Summary. This dashboard displays information about SSL certificates, including information about the key algorithms, expiry dates, CA, and certificate versions.

  • Endpoint Management. This dashboard displays information about assets that are not running an endpoint agent.

  • EOL Operating Systems. This dashboard provides information about operating systems and operating system versions, including EOL operating systems.

  • Exposed Assets. The Exposed Assets dashboard displays assets that are publicly exposed with an external port.

  • Priorities: All KEVs. Displays information about assets with Known Exploited Vulnerabilities (KEVs), including which of those KEVs are high or critical and which of those KEVs have solutions or workarounds.

  • Priorities: Fixable KEVs. Displays information about assets with Known Exploited Vulnerabilities (KEVs), including which of those KEVs are high or critical, which of those KEVs have solutions or workarounds, and which assets in the environment are not scanned for KEVs.

  • Priorities: Highs & Crits. Displays information about assets with High or Critical CVEs, including information about KEVs in the environment and which of those KEVs have solutions or workarounds.

Required Connectors #

To find all the assets in your environment, including certificate information about those assets and operating system information about those assets, Lucidum recommends you configure Lucidum connectors for:

  • The Endpoint Management solutions in your environment (for example, Jamf, Intune, Citrix Endpoint Management, Symantec Endpoint Management, Hexnode)

  • The Endpoint Protection solutions in your environment (for example, Trellix Endpoint Security, Symantec Endpoint Protection, SentinelOne, Crowdstrike Falcon, Microsoft Defender for Endpoint )

  • ·         The Endpoint Detection and Response solutions in your environment (for example, SentinelOne, Falcon Crowdstrike, Trend Micro XDR, Check Point Harmony Endpoint, Cortex XDR)

  • The Mobile Device Management solutions in your environment (for example, Addigy, Citrix Endpoint, Jamf Pro, Kandji)

  • The directory solutions in your environment (For example, Azure AD, Microsoft AD, Jump Cloud, PingOne, OpenLDAP,)

  • The DHCP solutions in your environment (For example, Infoblox, Efficient IP, BlueCat)

  • The VPN solutions in your environment (For example, Cisco AnyConnect, FortiClient, Palo Alto VPN, Citrix Gateway, Zscaler Private Access)

  • The cloud solutions in your environment (for example, AWS, Azure, Google Cloud, Oracle Cloud)

Certificate Summary #

The Certificate Summary dashboard displays information about SSL certificates, including information about the key algorithms, expiry dates, CA, and certificate versions.

The Certificate Summary dashboard looks like this:

security_it_ops-certificate-summary.png

Base Query #

Most of the charts in this dashboard use a query like:

Asset Type match CERT

This query searches for all certificates in the environment.

Charts #

  • Certificates Total. This chart displays the total number of certificates in the environment.

    • This chart queries the asset database and uses the query Asset Type match CERT. This query searches for all certificates.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Algorithms. This chart displays the type of key algorithms in use by all the certificates.

    • This chart queries the asset database and uses the query Asset Type match CERT. This query searches for all certificates.

    • From the data returned by the query, the Category field specifies the values to use to calculate the entire pie. In this case, the entire pie is the total count of Lucidum Asset Names.

    • From the data returned by the query, the Series field specifies the value to show in each slice of the pie. In this case, each slice displays a Certificate Algorithm.

    • The Chart Type is “Pie”.

  • Certificates: All Expiry Dates. This chart displays the next five expiry dates for certificates.

    • This chart queries the asset database and uses the query Asset Type match CERT. This query searches for all certificates.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Asset Expiry Time.

    • The Chart Type is “Bar”.

  • Certificates by CA. This chart displays the certificate authorities in use and the number of certificates assigned to each CA.

    • This chart queries the asset database and uses the query Asset Type match CERT. This query searches for all certificates.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Vendor.

    • The Chart Type is “Bar”.

  • Certificate Versions. This chart displays the versions for certificates (for example, SSLv2, SSLv3, TLS1.3) and the number of certificates assigned to each version.

    • This chart queries the asset database and uses the query Asset Type match CERT. This query searches for all certificates.

    • From the data returned by the query, the Category field specifies the values to use to calculate the entire pie. In this case, the entire pie is the total count of Lucidum Asset Names.

    • From the data returned by the query, the Series field specifies the value to show in each slice of the pie. In this case, each slice displays Certificate Version.

    • The Chart Type is “Pie”.

  • Expired Certs. This chart displays the number of certificates that have already expired.

    • This chart queries the asset database and uses the query Asset Type match CERT AND Asset Expiry time within past 999 years. This query searches for all expired certificates in the environment.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Asset Expiry Time.

    • The Chart Type is “Bar”.

  • Expired Certs All Expired. This chart displays the domains that have expired certificates.

    • This chart queries the asset database and uses the query Asset Type match CERT AND Asset Expiry time within past 999 years. This query searches for all expired certificates in the environment.

    • From the data returned by the query, the Category fields specifies the columns in the table. In this case, Full Domain Name and Asset Expiry Time.

    • The Chart Type is “Table”.

  • Full Certificate List. This chart displays all domains with certificates.

    • This chart queries the asset database and uses the query Asset Type match CERT. This query searches for all certificates.

    • From the data returned by the query, the Category fields specifies the columns in the table. In this case, Full Domain Name and Asset Expiry Time.

    • The Chart Type is “Table”.

  • Upcoming Expirations. This table lists the expiry dates coming up in the next 60 days and the number of assets that will expire on those dates.

    • This chart queries the asset database and uses the query Asset Type match CERT AND Asset Expiry Time within future 60 days. This query searches for all certificates that will expire in the next 60 days

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Asset Expiry Time.

    • The Chart Type is “Bar”.

  • Upcoming Expirations 60 Days Out. This chart displays the domains for which certificates will expire in the next 60 days.

    • This chart queries the asset database and uses the query Asset Type match CERT AND Asset Expiry Time within future 60 days. This query searches for all certificates that will expire in the next 60 days.

    • From the data returned by the query, the Category fields specifies the columns in the table. In this case, Full Domain Name and Asset Expiry Time.

    • The Chart Type is “Table”.

Endpoint Management Dashboard #

The Endpoint Management dashboard displays information about assets that are not running an endpoint agent.

The Endpoint Management dashboard looks like this:

endpoint_endpoint-management.png

Base Query #

Most of the charts in this dashboard use the following base query:

Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

This query searches for assets that do not have an endpoint agent and where the Asset Type is VM, Workstation, Cloud.Compute, Servers, Virtual.Guest, Server, Workstations, Windows, or MacMDM. These are all the types of endpoint in our example system.

If you wanted to create a dashboard for a different set of endpoints, you can supply one or more different asset types in the query or delete one or more asset types in the query. To view all Asset Types in your Lucidum system, in the Query Builder, select Asset Type. The value field includes a list of available Asset Types to choose from.

Charts #

  • Endpoint Agent Missing: Compute Assets. This chart displays a count of all endpoints without endpoint agents.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number.

  • Data Sources of No-Endpoint-Agent Devices. This chart displays all endpoints without endpoint protection and also displays the data sources associated with these endpoints.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Data Sources.

    • The Chart Type is “Bar”.

  • Locations of No-Endpoint-Agent Devices. This chart displays the locations for all devices without endpoint protection.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Location.

    • The Chart Type is “Bar”.

  • Departments of No-Endpoint-Agent Devices. This chart displays the departments associated with devices without endpoint protection.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Department.

    • The Chart Type is “Bar”.

  • OS of No-Endpoint-Agent Devices. This chart displays the operating systems and versions associated with devices without endpoint protection.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Luciudum OS Version.

    • The Chart Type is “Bar”.

  • Asset Types of No-Endpoint-Agent Devices. This chart displays the asset types associated with devices without endpoint protection.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Asset Type.

    • The Chart Type is “Bar”.

  • Vendors of No-Endpoint-Agent Devices. This chart displays the vendors associated with devices without endpoint protection.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Vendor.

    • The Chart Type is “Bar”.

  • Risk Level of No-Endpoint-Agent Devices. This chart displays the risk level for the devices without endpoint protection.

    • This chart uses the query Endpoint Agent (yes/no) is not yes AND Asset Type is equal to VM OR Asset Type is equal to Workstation OR Asset Type is equal to Cloud.Compute OR Asset Type is equal to Servers OR Asset Type is equal to Virtual.Guest OR Asset Type is equal to Server OR Asset Type is equal to Workstations OR Asset Type is equal to Windows OR Asset Type is equal to MacMDM

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Risk Level.

    • The Chart Type is “Bar”.

EOL Operating Systems #

The EOL Operating Systems dashboard provides information about operating systems and operating system versions, including EOL operating systems.

The EOL Operating Systems dashboard looks like this:

security_it_ops-eol-operating-systems.png

Base Query #

Most of the charts in this dashboard use a query like:

OS and Version match windows AND Asset Type not match VM_Image

This query searches for Windows OS version on assets that are not VM images.

If you want to edit this dashboard to monitor other operating systems, you can select a different value for OS and Version.

Charts #

  • Windows Servers by OS Version. This chart displays the active or pending Windows servers by OS version.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum OS Version match server ANd Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets with an OS Category of Microsoft Windows that are servers and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum Os Version.

    • The Chart Type is “Bar”.

  • EOL Windows Servers. This chart displays the total number of Windows servers that have EOL operating systems.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum Os Versino match server AND Lucidum OS Version match NT,2016,NT,2016,2012,2008,2000,2003 AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Windows operating systems, that are servers, are running an EOL version of Windows, and are online or pending.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • EOL Windows Servers by OS Ver. This chart displays all the end-of-life Windows versions in the environment and the number of assets running each EOL version of Windows.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum Os Versino match server AND Lucidum OS Version match NT,2016,NT,2016,2012,2008,2000,2003 AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Windows operating systems, that are servers, are running an EOL version of Windows, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum Os Version.

    • The Chart Type is “Bar”.

  • EOL Windows Servers by Department (Excl. Versions in Extended Support). This chart displays the name of each department that has EOL windows assets and the number of such assets in each department.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum Os Versino match server AND Lucidum OS Version match NT,2016,NT,2016,2012,2008,2000,2003 AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Windows operating systems, that are servers, are running an EOL version of Windows, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Department.

    • The Chart Type is “Bar”.

  • Windows Workstations by OS Version. This chart displays the active or pending Windows servers by OS version.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum OS Version not match server AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets with an OS Category of Microsoft Windows that are not servers and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum Os Version.

    • The Chart Type is “Bar”.

  • EOL Windows Workstations. This chart displays the total number of Windows servers that have EOL operating systems.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum OS Version match windows 7, windows xp, windows nt, windows 8 OR OS match 1507,1511,1607,1703,1709,1803,1809,1903,1909,2004,20H2,21H1 AND Lucidum OS Version not match serve AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Windows operating systems, that workstations running a Windows workstation OS, running an EOL Windows workstation OS, and are online or pending.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • EOL Windows Workstations by OS Ver. This chart displays all the end-of-life Windows versions in the environment and the number of assets running each EOL version of Windows.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum OS Version match windows 7, windows xp, windows nt, windows 8 OR OS match 1507,1511,1607,1703,1709,1803,1809,1903,1909,2004,20H2,21H1 AND Lucidum OS Version not match serve AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Windows operating systems, that workstations running a Windows workstation OS, running an EOL Windows workstation OS, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum OS Version.

    • The Chart Type is “Bar”.

  • EOL Windows Workstations by Department. This chart displays the name of each department that has EOL windows assets and the number of such assets in each department.

    • This chart queries the asset database and uses the query Lucidum OS Category match Microsoft Windows AND Lucidum OS Version match windows 7, windows xp, windows nt, windows 8 OR OS match 1507,1511,1607,1703,1709,1803,1809,1903,1909,2004,20H2,21H1 AND Lucidum OS Version not match serve AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Windows operating systems, that workstations running a Windows workstation OS, running an EOL Windows workstation OS, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Department.

    • The Chart Type is “Bar”.

  • All MacOS Assets by OS Version. This chart displays the total number of Mac assets in your environment.

    • This chart queries the asset database and uses the query OS and Version in apple,macos,catalina,monterey,ventura,big sur,mac os,os x,sonoma,mojave,high sierra,sierra,el capitan,yosemite,mavericks,mountain lion,snow leopard,leopard,panther,jaguar,puma,cheetah,kodiak OR Luciudm OS Category match macOs AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all Mac assets running MacOS.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum OS Version.

    • The Chart Type is “Bar”.

  • EOL MacOS Assets. This chart displays the total number of MacOS servers that have EOL operating systems.

    • This chart queries the asset database and uses the query Lucidum OS Category match macOS Windows AND OS and Version exists AND OS and Version match 10. AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running MacOS operating systems, that running an EOL version of MacOS, and are online or pending.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • EOL MacOS Assets by OS Ver. This chart displays all the end-of-life MacOS assets in the environment and the number of assets running each EOL version of Windows.

    • This chart queries the asset database and uses the query Lucidum OS Category match macOS Windows AND OS and Version exists AND OS and Version match 10. AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running MacOS operating systems, that running an EOL version of MacOS, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum OS Version.

    • The Chart Type is “Bar”.

  • EOL MacOS Assets by Department. This chart displays the name of each department that has EOL MacOS assets and the number of such assets in each department.

    • This chart queries the asset database and uses the query Lucidum OS Category match macOS Windows AND OS and Version exists AND OS and Version match 10. AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running MacOS operating systems, that running an EOL version of MacOS, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Department.

    • The Chart Type is “Bar”.

  • Linux Assets by OS Version. This chart displays the total number of Mac assets in your environment.

    • This chart queries the asset database and uses the query Lucidum OS Category match Linux AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all Linux assets that are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum OS Version.

    • The Chart Type is “Bar”.

  • EOL Linux Assets. This chart displays the total number of Linux servers that have EOL operating systems.

    • This chart queries the asset database and uses the query Lucidum OS Type match Linux AND Lucidum OS Version match Centos Linux 5 or Lucidum OS Version match CentOS Linux 6 or Lucidum OS Version match CentOS Linux 8 or Lucidum OS Version match Red Hat Enterprise Linux 3 or Lucidum OS Version match Red Hat Enterprise Linux 4 or Lucidum OS Version match Red Hat Enterprise Linux 5 or Lucidum OS Version match Red Hat Enterprise Linux 6 or Lucidum OS Version match Debian Linux 1.0 or Lucidum OS Version match Debian Linux 2.0 or Lucidum OS Version match Debian Linux 3.0 or Lucidum OS Version match Debian Linux 4.0 or Lucidum OS Version match Debian Linux 5.0 or Lucidum OS Version match Debian Linux 6.0 or Lucidum OS Version match Debian Linux 7.0 or Lucidum OS Version match Debian Linux 8.0 or Lucidum OS Version match Debian Linux 9.0 or Lucidum OS Version match Debian Linux 10.0 or Lucidum OS Version match Ubuntu Linux 4. or Lucidum OS Version match Ubuntu Linux 5. or Lucidum OS Version match Ubuntu Linux 6. or Lucidum OS Version match Ubuntu Linux 7. or Lucidum OS Version match Ubuntu Linux 8. or Lucidum OS Version match Ubuntu Linux 9. or Lucidum OS Version match Ubuntu Linux 10. orLucidum OS Version match Ubuntu Linux 11. or Lucidum OS Version match Ubuntu Linux 12. or Lucidum OS Version match Ubuntu Linux 13. or Lucidum OS Version match Ubuntu Linux 14. or Lucidum OS Version match Ubuntu Linux 15. or Lucidum OS Version match Ubuntu Linux 16. or Lucidum OS Version match Ubuntu Linux 17. or Lucidum OS Version match Ubuntu Linux 18. or Lucidum OS Version match Ubuntu Linux 19. or Lucidum OS Version match Ubuntu Linux 20.10 or Lucidum OS Version match Ubuntu Linux 21.04 or Lucidum OS Version match Ubuntu Linux 21.10 or Lucidum OS Version match SuSE Linux 10 or Lucidum OS Version match SuSE Linux 11 or Lucidum OS Version match Oracle Linux 6. AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Linux operating systems, that are also running an EOL version of Linux, and are online or pending.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • EOL Linux Assets by OS Ver. This chart displays all the end-of-life Linux assets in the environment and the number of assets running each EOL version of Linux.

    • This chart queries the asset database and uses the query Lucidum OS Type match Linux AND Lucidum OS Version match Centos Linux 5 or Lucidum OS Version match CentOS Linux 6 or Lucidum OS Version match CentOS Linux 8 or Lucidum OS Version match Red Hat Enterprise Linux 3 or Lucidum OS Version match Red Hat Enterprise Linux 4 or Lucidum OS Version match Red Hat Enterprise Linux 5 or Lucidum OS Version match Red Hat Enterprise Linux 6 or Lucidum OS Version match Debian Linux 1.0 or Lucidum OS Version match Debian Linux 2.0 or Lucidum OS Version match Debian Linux 3.0 or Lucidum OS Version match Debian Linux 4.0 or Lucidum OS Version match Debian Linux 5.0 or Lucidum OS Version match Debian Linux 6.0 or Lucidum OS Version match Debian Linux 7.0 or Lucidum OS Version match Debian Linux 8.0 or Lucidum OS Version match Debian Linux 9.0 or Lucidum OS Version match Debian Linux 10.0 or Lucidum OS Version match Ubuntu Linux 4. or Lucidum OS Version match Ubuntu Linux 5. or Lucidum OS Version match Ubuntu Linux 6. or Lucidum OS Version match Ubuntu Linux 7. or Lucidum OS Version match Ubuntu Linux 8. or Lucidum OS Version match Ubuntu Linux 9. or Lucidum OS Version match Ubuntu Linux 10. orLucidum OS Version match Ubuntu Linux 11. or Lucidum OS Version match Ubuntu Linux 12. or Lucidum OS Version match Ubuntu Linux 13. or Lucidum OS Version match Ubuntu Linux 14. or Lucidum OS Version match Ubuntu Linux 15. or Lucidum OS Version match Ubuntu Linux 16. or Lucidum OS Version match Ubuntu Linux 17. or Lucidum OS Version match Ubuntu Linux 18. or Lucidum OS Version match Ubuntu Linux 19. or Lucidum OS Version match Ubuntu Linux 20.10 or Lucidum OS Version match Ubuntu Linux 21.04 or Lucidum OS Version match Ubuntu Linux 21.10 or Lucidum OS Version match SuSE Linux 10 or Lucidum OS Version match SuSE Linux 11 or Lucidum OS Version match Oracle Linux 6. AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Linux operating systems, that are also running an EOL version of Linux, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Lucidum OS Version.

    • The Chart Type is “Bar”.

  • EOL Linux Assets by Department. This chart displays the name of each department that has EOL Linux assets and the number of such assets in each department.

    • This chart queries the asset database and uses the query Lucidum OS Type match Linux AND Lucidum OS Version match Centos Linux 5 or Lucidum OS Version match CentOS Linux 6 or Lucidum OS Version match CentOS Linux 8 or Lucidum OS Version match Red Hat Enterprise Linux 3 or Lucidum OS Version match Red Hat Enterprise Linux 4 or Lucidum OS Version match Red Hat Enterprise Linux 5 or Lucidum OS Version match Red Hat Enterprise Linux 6 or Lucidum OS Version match Debian Linux 1.0 or Lucidum OS Version match Debian Linux 2.0 or Lucidum OS Version match Debian Linux 3.0 or Lucidum OS Version match Debian Linux 4.0 or Lucidum OS Version match Debian Linux 5.0 or Lucidum OS Version match Debian Linux 6.0 or Lucidum OS Version match Debian Linux 7.0 or Lucidum OS Version match Debian Linux 8.0 or Lucidum OS Version match Debian Linux 9.0 or Lucidum OS Version match Debian Linux 10.0 or Lucidum OS Version match Ubuntu Linux 4. or Lucidum OS Version match Ubuntu Linux 5. or Lucidum OS Version match Ubuntu Linux 6. or Lucidum OS Version match Ubuntu Linux 7. or Lucidum OS Version match Ubuntu Linux 8. or Lucidum OS Version match Ubuntu Linux 9. or Lucidum OS Version match Ubuntu Linux 10. orLucidum OS Version match Ubuntu Linux 11. or Lucidum OS Version match Ubuntu Linux 12. or Lucidum OS Version match Ubuntu Linux 13. or Lucidum OS Version match Ubuntu Linux 14. or Lucidum OS Version match Ubuntu Linux 15. or Lucidum OS Version match Ubuntu Linux 16. or Lucidum OS Version match Ubuntu Linux 17. or Lucidum OS Version match Ubuntu Linux 18. or Lucidum OS Version match Ubuntu Linux 19. or Lucidum OS Version match Ubuntu Linux 20.10 or Lucidum OS Version match Ubuntu Linux 21.04 or Lucidum OS Version match Ubuntu Linux 21.10 or Lucidum OS Version match SuSE Linux 10 or Lucidum OS Version match SuSE Linux 11 or Lucidum OS Version match Oracle Linux 6. AND Lucidum Status match Online OR Lucidum Status match Pending. This query searches for all assets running Linux operating systems, that are also running an EOL version of Linux, and are online or pending.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Department.

    • The Chart Type is “Bar”.

Exposed Assets #

The Exposed Assets dashboard displays assets that are publicly exposed with an external port.

The Exposed Assets dashboard looks like this:

security_it_ops-exposed-assets.png

Base Query #

Most of the asset charts in this dashboard use a query like:

External Port exists

The query searches for all assets with an external port.

Charts #

  • Assets w/Exposed Ports Total. This chart displays the number of assets with one or more external ports.

    • This chart queries the asset database and uses the query External Ports exists. This query searches for all assets that include an external port.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets w/Exposed Ports Critical Vulns Exist. This chart displays the number of assets with one or more external ports and a Critical CVEs.

    • This chart queries the asset database and uses the query External Ports exists AND Critical CVE List exists. This query searches for all assets that include an external port and also include critical CVEs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets w/Exposed Ports TOR Node or SANS Malicious IP. . This chart displays the number of assets with one or more external ports and an IP from a TOR node.

    • This chart queries the asset database and uses the query External Ports exists AND TOR Node IP (yes/no) != no. This query searches for all assets that include an external port and also include an IP from a TOR node.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets w/Exposed Ports Listing. This chart lists the assets with one or more external ports.

    • This chart queries the asset database and uses the query External Ports exists. This query searches for all assets that include an external port.

      • From the data returned by the query, the Category fields specifies the columns in the table. In this case, Cloud Account, Critical Vulns, Exposed Ports, Full Domain Name, High Vulns, KEV Count, Lucidum Asset Name, Lucidum OS Category, Public IP Address, Tag::Value

    • The Chart Type is “Table”.

  • Assets by External Ports. This chart displays the number of assets with one or more external ports, organized by external port.

    • This chart queries the asset database and uses the query External Ports exists. This query searches for all assets that include an external port and have a critical CVE.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the External Ports.

    • The Chart Type is “Bar”.

  • Assets w/Exposed Ports 90-Day History. This chart displays the total number of assets with one or more external ports, each day for the last 90 days.

    • This chart queries the asset database and uses the query External Ports exists AND Record Generated Time within past 3 months. This query searches for all assets that include an external port within the last 3 months.

    • From the data returned by the query, the Category field specifies the values to show on the y-axis. In this case, the y-axis displays a count of Lucidum Asset Name.

    • From the data returned by the query, the Series field specifies the values to show on the x-axis. In this case, the x-axis displays the Record Generated Time.

    • The Chart Type is “Bar”.

Priorities: All KEVs #

The Priorities: All KEVs dashboard displays information about assets with Known Exploited Vulnerabilities (KEVs), including which of those KEVs are high or critical and which of those KEVs have solutions or workarounds.

The Priorities: All KEVs dashboard looks like this:

security_&_it_ops_priorities_all_kevs.png

Base Query #

Most of the asset charts in this dashboard use a query like:

Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes

or

KEV Count >= 1

The first query searches for information about assets with any KEVs.

The second query returns a count of assets with KEVs.

Charts #

  • Total Assets. This chart displays a count of the total assets in the environment.

    • This chart queries the asset database and uses the query Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix. This query searches for all compute assets.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets w/High or Critical Vulns. This chart displays a count of assets with critical vulnerabilities or high vulnerabilities.

    • This chart queries the asset database and uses the query Critical CVE list exists OR High CVE lists exists. This query searches for all assets with critical CVEs or high CVEs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets with Known Exploited Vulnerabilities. This chart displays a count of assets with known exploited vulnerabilities (KEVs).

    • This chart queries the asset database and uses the query KEV Count >= 1. This query searches for all assets with one or more KEVs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • KEV Assets with Solutions or Workarounds. This chart displays a count of assets with known exploited vulnerabilities (KEVs) that have fixes or workarounds.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Fixable (True/False) match yes. This query searches for all assets that include a KEV that has a workaround or fix.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Windows Server Assets w/KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Lucidum OS Version match windows server. This query searches for all Windows server assets that include a KEV.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

      Windows Workstation Assets w/KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

      • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Lucidum OS Version not match windows server AND Lucidum OS match windows. This query searches for all Windows workstation assets that include a KEV.

      • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

      • The Chart Type is “Table”.

  • Linux Assets w/KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Lucidum OS CAtegory match Linux. This query searches for all Linux assets that include a KEV.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Apple Assets w/KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Lucidum OS CAtegory in iOS,macOS,tvOS,iPadOS. This query searches for all Apple assets that include a KEV.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Unix Assets w/KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Lucidum OS Category match Unix. This query searches for all Unix assets that include a KEV.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

Priorities: Fixable KEVs #

The Priorities: Fixable KEVs dashboard displays information about assets with Known Exploited Vulnerabilities (KEVs), including which of those KEVs are high or critical, which of those KEVs have solutions or workarounds, and which assets in the environment are not scanned for KEVs.

The Priorities: Fixable KEVs dashboard looks like this:

security_&_it_ops_priorities_fixable_kevs.png

Base Query #

Most of the asset charts in this dashboard use a query like:

Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Known Exploited Vulnerability Fix (True/False) match yes

The first query searches for assets with KEVs that have a fix or workaround.

Charts #

  • Total Assets. This chart displays a count of the total assets in the environment.

    • This chart queries the asset database and uses the query Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix. This query searches for all compute assets.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets w/High or Critical Vulns. This chart displays a count of assets with critical vulnerabilities or high vulnerabilities.

    • This chart queries the asset database and uses the query Critical CVE list exists OR High CVE lists exists AND Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix. This query searches for all compute assets with critical CVEs or high CVEs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets with Known Exploited Vulnerabilities. This chart displays a count of assets with known exploited vulnerabilities (KEVs).

    • This chart queries the asset database and uses the query KEV Count >= 1 AND Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix. This query searches for all compute assets with one or more KEVs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • KEV Assets with Solutions or Workarounds. This chart displays a count of assets with known exploited vulnerabilities (KEVs) that have fixes or workarounds.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Fixable (True/False) match yes AND Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix. This query searches for all compute assets that include a KEV that has a workaround or fix.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Unscanned Assets. This chart displays a count of assets that have not been scanned for vulnerabilities.

    • This chart queries the asset database and uses the query Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix AND Data Sources not match Rapid7 AND AND Data Sources not match Lackework AND Data Sources not match Crowdstrike AND Data Sources not match SentinelOne AND Data Sources not match Tenable AND Data Sources not match Symantec. This query searches for all compute assets that do not have at least one of the following installed: Lacework, Rapid7, CrowdStrike, SentinelOne, Tenable, or Symantec.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Unscanned Assets by OS Category. This chart displays assets that have not been scanned for vulnerabilities, organized by operating system category (for example, Microsoft, Linux, MacOS, Unix).

    • This chart queries the asset database and uses the query Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix AND Data Sources not match Rapid7 AND AND Data Sources not match Lackework AND Data Sources not match Crowdstrike AND Data Sources not match SentinelOne AND Data Sources not match Tenable AND Data Sources not match Symantec. This query searches for all compute assets that do not have at least one of the following installed: Lacework, Rapid7, CrowdStrike, SentinelOne, Tenable, or Symantec.

    • From the data returned by the query, the Category field specifies the values to use to calculate the entire pie. In this case, the entire pie is the total count of Lucidum Asset Names.

    • From the data returned by the query, the Series field specifies the value to show in each slice of the pie. In this case, each slice displays a Lucidum OS Category.

    • The Chart Type is “Pie”.

  • Windows Server Assets w/Fixable KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Vulnerability Fix (True/False) match yes AND Known Exploited Vulnerability (True/False) match yes AND Lucidum OS Version match windows server. This query searches for all Windows server assets that include a KEV with a known fix or workaround.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Windows Workstation Assets w/Fixable KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Vulnerability Fix (True/False) match yes AND Known Exploited Vulnerability (True/False) match yes AND Lucidum OS Version not match windows server AND Lucidum OS Version match windows. This query searches for all Windows workstation assets that include a KEV with a known fix or workaround.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Linux Assets w/Fixable KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum Os Category match Linux ANd Vulnerabilities matching all: Known Vulnerability Fix (True/False) match yes AND Known Exploited Vulnerability (True/False) match yes. This query searches for all Linux server assets that include a KEV with a known fix or workaround.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Apple Assets w/Fixable KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Category in iOS,macOS,tvOS,iPadOS AND Vulnerabilities matching all: Known Vulnerability Fix (True/False) match yes AND Known Exploited Vulnerability (True/False) match yes. This query searches for all Apple server assets that include a KEV with a known fix or workaround.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Unix Assets w/Fixable KEVs. This chart displays a list of Windows Server assets that have KEVs. The table also includes details about the KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Category match Unix AND Vulnerabilities matching all: Known Vulnerability Fix (True/False) match yes AND Known Exploited Vulnerability (True/False) match yes. This query searches for all Unix assets that include a KEV with a known fix or workaround.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

Priorities: Highs & Crits #

The Priorities: Highs & Crits dashboard displays information about assets with High or Critical CVEs, including information about KEVs in the environment and which of those KEVs have solutions or workarounds.

The Priorities: Highs & Crits dashboard looks like this:

security_&_it_ops_priorities_highs_&_crits.png

Base Query #

Most of the asset charts in this dashboard use a query like:

Critical CVE list exists OR High CVE lists exists

The query searches assets with either one or more critical CVEs or one or more high CVEs.

Charts #

  • Total Assets. This chart displays a count of the total assets in the environment.

    • This chart queries the asset database and uses the query Lucidum OS Category in Microsoft Windows,Linux,macOS,tvOS,iPadOS,Unix. This query searches for all compute assets.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets w/High or Critical Vulns. This chart displays a count of assets with critical vulnerabilities or high vulnerabilities.

    • This chart queries the asset database and uses the query Critical CVE list exists OR High CVE lists exists. This query searches for all assets with critical CVEs or high CVEs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Assets with Known Exploited Vulnerabilities. This chart displays a count of assets with known exploited vulnerabilities (KEVs).

    • This chart queries the asset database and uses the query KEV Count >= 1. This query searches for all assets with one or more KEVs.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • KEV Assets with Solutions or Workarounds. This chart displays a count of assets with known exploited vulnerabilities (KEVs) that have fixes or workarounds.

    • This chart queries the asset database and uses the query Vulnerabilities matching all: Known Exploited Vulnerability (True/False) match yes AND Fixable (True/False) match yes. This query searches for all assets that include a KEV that has a workaround or fix.

    • From the data returned by the query, the Category field specifies the value to show in the chart. In this case, the chart displays a count of Lucidum Asset Name.

    • The Chart Type is “Big Number”.

  • Windows Server Assets w/High or Critical Vulns. This chart displays a list of Windows Server assets that have critical or high vulnerabilities. The table also includes details about KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Version match windows server AND Critical Vulns exists OR High Vulns exists. This query searches for all Windows server assets that have one or more critical vulnerabilities or high vulnerabilities.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Windows Workstation Assets w/High or Critical Vulns. This chart displays a list of Windows Server assets that have critical or high vulnerabilities. The table also includes details about KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Version not match windows server AND Lucidum OS Version match windows AND Critical Vulns exists OR High Vulns exists. This query searches for all Windows workstation assets that have one or more critical vulnerabilities or high vulnerabilities.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Linux Assets w/High or Critical Vulns. This chart displays a list of Windows Server assets that have critical or high vulnerabilities. The table also includes details about KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Category match Linux AND Critical Vulns exists OR High Vulns exists. This query searches for all Linux assets that have one or more critical vulnerabilities or high vulnerabilities.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Apple Assets w/High or Critical Vulns. This chart displays a list of Windows Server assets that have critical or high vulnerabilities. The table also includes details about KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Category in iOS,macOS,tvOS,iPadOS AND Critical Vulns exists OR High Vulns exists This query searches for all Apple assets that have one or more critical vulnerabilities or high vulnerabilities.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

  • Unix Assets w/High or Critical Vulns. This chart displays a list of Windows Server assets that have have critical or high vulnerabilities. The table also includes details about KEVs and the asset.

    • This chart queries the asset database and uses the query Lucidum OS Category match Unux AND Critical Vulns exists OR High Vulns exists. This query searches for all Unix assets that have one or more critical vulnerabilities or high vulnerabilities.

    • From the data returned by the query, the Categories field specifies the columns for the table. In this case, for each asset, the chart displays Source Asset Name, Critical Vulns, High Vulns, KEV List, KEV Count, IP Address, Location, Department, and Lucidum OS Version.

    • The Chart Type is “Table”.

What are your Feelings

@ 2024 Lucidum, Inc.