When you combine ThreatConnect’s TIP and SOAR capabilities with ThreatConnect Risk Quantifier (RQ), you’re not only able to better prioritize vulnerabilities based on the level of financial risk they introduce to your business, but also take action on those vulnerabilities directly from the ThreatConnect Platform.
The following actions are available via the RQ Playbook App for ThreatConnect TIP & SOAR:
- Get Vulnerable Endpoints By CVE: This action returns arrays detailing the associated applications and endpoints with this CVE.
- Get Financial Impact by CVE: This action returns the total monetary contributory effect of the CVE ID to the enterprise.
- Get Endpoint Financial Information: This action returns the max Single Loss Expectancy (SLE) value and type of attack for the associated CVE.
This app can be found in the ThreatConnect App Catalog under the name: ThreatConnect RQ