Getting Started with Custom Assessment and Remediation

The CAR module is a powerful solution designed to automate script execution across your assets. It provides a centralized framework for creating, managing, and executing scripts on Windows, Linux, Unix, and Mac platforms. 

CAR extends remediation outside the Qualys TruRisk Eliminate patch catalog, which includes:

• BIOS, firmware, and driver updates: CAR applies vendor firmware and driver update utilities.
• UNIX operating systems: CAR performs assessment and remediation on UNIX platforms including AIX, Solaris and FreeBSD, alongside Windows, macOS and Linux.
• Custom and in-house applications: CAR carries its own detection and execution logic for applications that are not present in the Qualys patch catalog.

Role-Based Access Control (RBAC) in CAR

You must have the user roles defined to get started with CAR. Not all users have access to execute all the operations; hence, user segregation is a better way to streamline the process of script execution in your environment.

CAR uses RBAC permissions that control access to various functions.

To know more about the predefined roles in Qualys CAR, refer to Required Roles and Permissions for CAR.

CAR Licensing

We provide a Free license type for CAR to help you understand CAR and its features. This license is automatically activated for our new customers. With the free license type for CAR, you can access only Home and Library. For an enriched experience, you can choose a Trial license plan. This trial license plan lets you access all features of CAR for 30 days. 

CAR features are available based on different license types. The table below provides the features you can access with each type of license. 

Policy Audit (PA) is an enhanced version of Policy Compliance (PC). Depending on your subscription, you may view Policy Audit (PA) or Policy Compliance (PC) in your application.

License Type	Available CAR Features
TruRisK™ Eliminate	Create all types of scripts except Custom QIDs Full access to the CAR library except for the Audit Fix category.
Policy Audit	Create scripts: Limited to Custom QIDs and Custom Scripts View CAR library
Policy Audit + Audit Fix	Create scripts View CAR library: Limited to ‘View and Import' scripts from the Audit Fix category
Security Configuration Assessment (SCA) + Audit Fix	Create scripts: Limited to control ID remediation scripts View CAR library: Limited to ‘View and Import' scripts from the Audit Fix category
File Integrity monitoring	Create scripts View CAR library
Custom Assessment and Remediation	Create scripts Full access to the CAR Library except the Audit Fix category.

Supported Script Languages in CAR

CAR supports script creation on supported operating systems, devices, and appliances. The currently supported script languages include:

Platforms	Script Languages
Linux	LUA, PERL, Python, Shell
Windows	PowerShell Command, PowerShell Script, Python, VBScript VBScripts are run in batch mode.
Unix	LUA, PERL, Python, Shell
MAC	LUA, PERL, Python, Shell

Related Topics

Role-Based Access Control

Prerequisites for CAR

Supported Platforms

Supported Scripting Languages