Inspector2 / Client / batch_get_finding_details

batch_get_finding_details

Inspector2.Client.batch_get_finding_details(**kwargs)

Gets vulnerability details for findings.

See also: AWS API Documentation

Request Syntax

response = client.batch_get_finding_details(
    findingArns=[
        'string',
    ]
)

Parameters:

findingArns (list) –

[REQUIRED]

A list of finding ARNs.

• (string) –

Return type:

dict

Returns:

Response Syntax

{
    'errors': [
        {
            'errorCode': 'INTERNAL_ERROR'|'ACCESS_DENIED'|'FINDING_DETAILS_NOT_FOUND'|'INVALID_INPUT',
            'errorMessage': 'string',
            'findingArn': 'string'
        },
    ],
    'findingDetails': [
        {
            'cisaData': {
                'action': 'string',
                'dateAdded': datetime(2015, 1, 1),
                'dateDue': datetime(2015, 1, 1)
            },
            'cwes': [
                'string',
            ],
            'epssScore': 123.0,
            'evidences': [
                {
                    'evidenceDetail': 'string',
                    'evidenceRule': 'string',
                    'severity': 'string'
                },
            ],
            'exploitObserved': {
                'firstSeen': datetime(2015, 1, 1),
                'lastSeen': datetime(2015, 1, 1)
            },
            'findingArn': 'string',
            'referenceUrls': [
                'string',
            ],
            'riskScore': 123,
            'tools': [
                'string',
            ],
            'ttps': [
                'string',
            ]
        },
    ]
}

Response Structure

• (dict) –

  • errors (list) –

    Error information for findings that details could not be returned for.

    • (dict) –

      Details about an error encountered when trying to return vulnerability data for a finding.

      • errorCode (string) –

        The error code.

      • errorMessage (string) –

        The error message.

      • findingArn (string) –

        The finding ARN that returned an error.

  • findingDetails (list) –

    A finding’s vulnerability details.

    • (dict) –

      Details of the vulnerability identified in a finding.

      • cisaData (dict) –

        The Cybersecurity and Infrastructure Security Agency (CISA) details for a specific vulnerability.

        • action (string) –

          The remediation action recommended by CISA for this vulnerability.

        • dateAdded (datetime) –

          The date and time CISA added this vulnerability to their catalogue.

        • dateDue (datetime) –

          The date and time CISA expects a fix to have been provided vulnerability.

      • cwes (list) –

        The Common Weakness Enumerations (CWEs) associated with the vulnerability.

        • (string) –

      • epssScore (float) –

        The Exploit Prediction Scoring System (EPSS) score of the vulnerability.

      • evidences (list) –

        Information on the evidence of the vulnerability.

        • (dict) –

          Details of the evidence for a vulnerability identified in a finding.

          • evidenceDetail (string) –

            The evidence details.

          • evidenceRule (string) –

            The evidence rule.

          • severity (string) –

            The evidence severity.

      • exploitObserved (dict) –

        Contains information on when this exploit was observed.

        • firstSeen (datetime) –

          The date an time when the exploit was first seen.

        • lastSeen (datetime) –

          The date an time when the exploit was last seen.

      • findingArn (string) –

        The finding ARN that the vulnerability details are associated with.

      • referenceUrls (list) –

        The reference URLs for the vulnerability data.

        • (string) –

      • riskScore (integer) –

        The risk score of the vulnerability.

      • tools (list) –

        The known malware tools or kits that can exploit the vulnerability.

        • (string) –

      • ttps (list) –

        The MITRE adversary tactics, techniques, or procedures (TTPs) associated with the vulnerability.

        • (string) –

Exceptions

• Inspector2.Client.exceptions.ValidationException

• Inspector2.Client.exceptions.AccessDeniedException

• Inspector2.Client.exceptions.ThrottlingException

• Inspector2.Client.exceptions.InternalServerException