Using Iterators in ReportsA “How To” Guide for SecurityCenter

What Is an Iterator?

•Use an iterator in a SecurityCenter report to define a group of items and step through the items in the group, presenting details on eacho Like a for-next or while

loop in a programo Step through a

group of IP addresses, vulnerabilities, or ports

o Present further details about each in the form of tables and charts

Iterator Example

•An example “Vulnerabilities Per Host” Reporto Use an iterator to step through all detected hostso Show host information per hosto Show a pie chart of the count of active vulnerabilities

at each severity level per hosto Show a table of the top most severe active

vulnerabilities per hostfor (all hosts) {

display infodisplay pie chartdisplay table

}

Iterator Example

Edit Iterator dialogUse plugin 19506 to enumerate hosts, and iterate over the first 10 IP addresses…

…displaying, for each IP address, host information…

Iterator Example

Edit Pie Chart dialog…and, for each IP address, a pie chart of active vulnerabilities at each severity level…

Iterator Example

Edit Table dialog…and, for each IP address, a table of the top 10 most severe active vulnerabilities

Iterator Example

•Example page of the resulting Vulnerabilities Per Host Report

o Shows the host information, pie chart, and top vulnerabilities table for an IP address

Iterator Notes

• Iterators are only available in reports•The filter for the iterator defines the set of objects to iterate over; this entire set will be iterated over in the report

•The report elements within the iterator will be repeated for each object in the iterated set

•The filters for the report elements within the iterator can further refine what information is displayed for each object in the iterated set

Iterator Notes

• Iterators can be placed within section and group report elements

•A section element cannot be placed within an iterator

•Do not place a group element within an iterator; any elements inside a group that is within an iterator will not display in the report

•Use iterator to show Users per Host

Iterator Uses

Example from Daily Host Alerts Report: Users Accessing Hosts

Display users

Iterate over IPs

•Use iterator to show Software per Host

Iterator Uses

Example from Windows Software Summary

Display OS info

Display software

info

Iterate over IPs

•Use iterator to show Plugin output per Host

Iterator Uses

Example from Insider Threat Report

Display vuln info

Iterate over IPs

•Use iterator to show Hosts per Vulnerability

Iterator Uses

Example from Remediation Instructions Report by Vulnerability

Display vuln info with list

of IPs

Iterate over vulns

•Use iterator to show Hosts per Vulnerability

Iterator Uses

Example from PVS Detections Report

Iterate over vulns

Display IPs

•Use iterator to show Hosts per Port

Iterator Uses

Example from TCP Port Report

Iterate over ports

Display IPs

Iterators

•Use an iterator in a SecurityCenter report to define a group of items and step through the items in the group, presenting details on each

for (all items) {display details...

}

For Questions ContactTenable Customer Support Portal