Tenable Vulnerability Management

• Scan completedRuns when a scan run finishes, with the scan's id, name and times. Runs that finished before the workflow was turned on don't start it. How often it checks follows your workspace plan.
• Scan failedRuns when Tenable aborts a scan run because it ran into problems (a scan someone stopped doesn't count). How often it checks follows your workspace plan.
• New vulnerability foundRuns for each vulnerability newly found on an asset, critical and high unless other severities are chosen, with the asset, the plugin and how to fix it. Checks at most every 15 minutes.
• Vulnerability fixedRuns for each vulnerability Tenable no longer finds on an asset, with the asset and the plugin. Checks at most every 15 minutes.
• New asset discoveredRuns for each asset Tenable sees for the first time, with its names, addresses and operating system. Checks at most every 15 minutes.
• New audit log eventRuns for each new audit log event, such as a sign-in, a new user or a changed setting, with who did it and whether it failed. Needs an administrator's API keys. How often it checks follows your workspace plan.

• List scansList the scans you can see with their status (completed, running, aborted and so on) and when they last ran, optionally in one folder, by status, by name or by when they last started.
• Get scan resultsGet a scan's latest run (or one past run): its status and times, each host with its count of findings by severity, and the findings grouped by plugin.
• Create scanCreate a scan of the given targets (addresses, ranges or host names) from a Tenable scan template, Basic Network Scan unless another is chosen. It isn't started: use 'Launch scan'.
• Launch scanStart a scan now, optionally on other targets for this run only. Returns the new run's id; the scan runs on in Tenable.
• Pause scanPause a running scan. Tenable times out a scan paused for 14 days.
• Resume scanResume a paused scan from where it stopped.
• Stop scanStop a pending, running or paused scan. Its run ends as canceled.
• Delete scanDelete a scan and its results. A running scan must be stopped first.
• List scan runsList a scan's past runs, newest first, with each run's status and when it started and finished.
• Export scan resultsExport a scan's results as a file (CSV, Nessus, HTML or PDF) a later step can attach or upload. Waits while Tenable prepares it.
• List assetsList or search assets (hosts and devices Tenable has seen) with their addresses, names, operating system and exposure score.
• Get assetGet one asset with its addresses, host names, operating system, tags, sources and when it was first and last seen.
• Tag assetsAdd a tag to one or more assets, or take it off them. Tenable applies it in the background within a few minutes.
• List vulnerabilitiesList vulnerabilities grouped by plugin, with how many times each was found, across every asset or on one asset, optionally only some severities.
• Export vulnerabilitiesGet every finding (one vulnerability on one asset, with the plugin's details, CVEs and fix) matching the filters, through Tenable's export. Waits while Tenable prepares it. Without a date, Tenable covers the last 30 days.
• Get pluginGet a plugin (one of Tenable's vulnerability checks) with its family, synopsis, description, solution and risk factor.
• List tag categoriesList the tag categories (such as Location or Owner) used to tag assets.
• List tagsList tags (each a category and value, such as Location: Seattle) with their UUIDs.
• Create tagCreate a tag value in a category, such as Seattle in Location. A category that doesn't exist yet is created too.
• Delete tagDelete a tag value, which also takes it off every asset. Its category is kept.
• List agentsList linked Tenable agents with their platform, IP address, status, health, groups and when they last connected.
• List scannersList the scanners and scanner groups you can scan with, including Tenable's cloud scanners, with their status.
• List usersList the account's users with their email, role level and whether they can sign in. Needs an administrator's API keys.
• List audit log eventsList audit log events, newest first: who did what (sign-ins, changes to users, scans and settings), to what, and whether it failed.
• List exclusionsList exclusions: the hosts, ranges and times scans must leave alone, with their schedules.

No actions match that.