quaxar-attack-surface-reports
Get attack surface reports from S2W Quaxar service.
quaxar-attack-surface-reports [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
- duration=NUM{mon|w|d|h|m|s}
- Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example,
10smeans data from 10 seconds earlier. - from=yyyyMMddHHmmss
- Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- to=yyyyMMddHHmmss
- End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| asm_id | String | ASM ID | e.g. ORG_ID-1234 |
| title | String | Title | e.g. Private services at [IP] have been exposed in a public |
| published | Date | Published | |
| ip | IP address | IP address | |
| num_services | Integer | Number of services | |
| services | List | Services | Elements with port, service, asset properties |
| asset | Bool | Asset | true or false |
| organization | String | Organization | |
| doc_link | String | Doc Link | e.g. /intvault/asm/[ID] |