Overview

Scenario

SecMaster provides a playbook that can automatically notify of high-risk server vulnerabilities to operations personnel.

How the Playbook Works

The Automatic notification of high-risk vulnerabilities playbook has been matched the Automatic notification of high-risk vulnerabilities workflow. This workflow needs to use Simple Message Notification (SMN) to send notifications. So you need to create and subscribe to a notification topic in SMN.

If a high-risk vulnerability was reported by HSS, SMN sends a notification to operations personnel.

Figure 1 Automatic notification of high-risk vulnerabilities workflow

Prerequisites

You have enabled Host Security Service (HSS) alarm access on the Data Integration page under the Settings pane. For details, see Data Integration.

Figure 2 Accessing HSS alerts

To view accessed data, choose Risk Prevention > Vulnerabilities.

Figure 3 Viewing alerts