VMDR Incident Groups

For effective management of vulnerability incidents, you can group the individual vulnerability incidents based on multiple factors, such as Vuln Severity, multiple Qualys Knowledgebase fields, Qualys Detection Score (QDS), QDS Severity, Asset Risk Score (ARS), Asset Criticality Score (ACS), Operating System, Qualys Asset Tags, Assignment Group, Configuration Item, and so on.

Qualys VMDR creates incident groups based on the Grouping Rules configured in Qualys Core and assigns them to the remediation team based on the defined assignment rules.

Vulnerability incident grouping provides better visibility to remediation owners, allowing them to track remediation with fewer incidents and quicker remediations, organize vulnerability incidents, and analyze them in bulk.

You can view vulnerability incident groups assigned to you and your group as a remediation owner.

You can view the state and priority of each incident group, the assignment group, the number of vulnerability incidents included in the incident group, the percentage of remediation, and so on.

vmdr_task_groups

For each vulnerability incident group, you can view the following details:

vulnerability_group_task

You can view the basic information about a vulnerability group incident, such as the incident number and status, assignment group, and priority.

The Group Definition displays the detection event rule applied to create this group incident.

vulnerability_group_task_grouo_definition

 

Related Topic

General Settings