Custom Assessment and Remediation Release 2.5.2

June 25, 2025 (Updated on July 11, 2025)

Enhancements in Tag-based User Scope

The Tag-based User Scope feature is enhanced to include additional CAR entities beyond those introduced in the CAR 2.5.1 Release.

The scope of this feature now includes the following CAR entities:

  • Scripts
  • Schedules
  • Jobs
  • Blocked Commands
  • Activity Logs

For more information on Tag-based User Scope, refer to CAR Online Help.

Visibility into Blocked Command Modifications

You can now view the names of the users who have created and updated each blocked command. We have introduced the following new columns in the Blocked Commands tab:

  • Created By
  • Updated By

To view this information, navigate to the Configuration > Blocked Commands tab.

Modify Script Parameters Without Editing the Script

Running scripts with different script parameter values is now possible without modifying the script itself. We have introduced the Script Parameters section, which enables you to modify script parameters in the parameterized script while configuring the script to run, test, or schedule.

The following image shows the Script Parameters section, where you can modify the value as required.

After running the script, you can view the modified parameters in the Script Parameters section by clicking the job in the Jobs tab.

Enhanced Custom QID Detection based on Script Output

For detection logic based on script output, you can now use multiple cardinalities to configure detection conditions as Detected or Not-Detected as per the Evaluation Criteria. If both conditions are not satisfied, no QIDs are detected.

For more information on detection logic based on script output, refer to CAR Online Help.

API Support:

Detection of QIDs using multiple conditions is also supported through CAR Scripts APIs. For more information, refer to the Support for Multiple Detection Conditions in Custom QID Scripts section in the CAR 2.5.2 API Release Notes.

CAR Features Based on License Types

From this release, CAR features are available based on different Qualys modules/product licenses. The table below provides which CAR features you can access with each type of license.

For more information on all license types, refer to CAR Online Help.

License Type Available CAR Feature

Eliminate

  • Create all types of scripts except Custom QIDs
  • All scripts in the library are available to view and import, except the script contents in the Policy Audit Fix/PC Remediation category

File Integrity monitoring

  • Create custom scripts
  • View all scripts in the library except the script contents