Importing old scan reports

Strobes allow you to import your old scan reports from many scanners. To do so, navigate to the Connectors page and click on Report Import under Categories.

From here, you can import any of your XML-based or CSV reports.

Importing vulnerabilities using .XML report

Select a relevant connector. I have selected Nessus Report Importer as an example. However, the steps to import vulnerabilities are consistent across all the XML based import connectors.

In Step One, you are required to:

• Select the severity of vulnerabilities that you would like to import from the XML report that you are about to upload.
• You have an option to import vulnerabilities of a specific asset. For that, enter the asset IP or URL into the Asset input field. You can leave it empty if you would like to import vulnerabilities belonging to all assets.
• For the vulnerabilities that you are about to import, you can assign tags to all of them. For example, you can add a tag such as the scanned date, scan name or scan purpose, etc. This will help you in easier management.
• Upon scrolling down, you would come across more options such as an option to merge the assets from the XML report with the existing assets on Strobes based on Mac Address, Hostname, and IP address. This is really a powerful feature that helps you eliminate any duplicate asset records.
  
• Once you review the options in Step One, click on Next

In Step Two, you are required to upload the XML file that you have exported from your scanner.

• Click on Upload to add your file into the queue.
• The amount of time taken to process and import the vulnerabilities from the XML report is dependant on its size and the count of vulnerabilities in it.
• You can access its status from the Import tab on the Tasks page.
  
• To access the logs of the import task, click on View Logs in the overflow menu.

Import Vulnerabilities using CSV

To import vulnerabilities using CSV, click on Import Bugs from CSV connector.

In Step One, you are required to:

• Select the severity of vulnerabilities that you would like to import from the XML report that you are about to upload.
• You have an option to import vulnerabilities of a specific asset. For that, enter the asset IP or URL into the Asset input field. You can leave it empty if you would like to import vulnerabilities belonging to all assets.
• For the vulnerabilities that you are about to import, you can assign tags to all of them. For example, you can add a tag such as the scanned date, scan name or scan purpose, etc. This will help you in easier management.
• Upon scrolling down, you would come across more options such as an option to merge the assets from the XML report with the existing assets on Strobes based on Mac Address, Hostname, and IP address. This is really a powerful feature that helps you eliminate any duplicate asset records.
• Once you review the options in Step One, click on Next

In Step Two, you are required to upload the CSV file with vulnerabilities in it in the given format.

• Scroll down to download the sample CSV template.
  
• Fill the CSV with your vulnerabilities following the legends provided.
  
• Once you are done editing, save the CSV file and upload it.
• The amount of time taken to process and import the vulnerabilities from the XML report is dependant on its size and the count of vulnerabilities in it.
• You can access its status from the Import tab on the Tasks page.