Rapid7 InsightVM

https://docs.rapid7.com/insightvm/
Admin
Rapid7 InsightVM is a vulnerability management platform that enables organizations to discover,...
Tokens:458,192
Snippets:3,879
Trust Score:10
Update:1 month ago
Show doc for...
Tokens:
Raw
### Example installation verification output

Source: https://docs.rapid7.com/insightvm/scan-assistant-combined

Example output showing details of the installed R7ScanAssistant package.

```text
Name: R7ScanAssistant
Epoch: 0
Version: 1.2.1
Release: 1
Architecture: x86_64
Install Date: Mon 15 Aug 2022 05:31:15 PM UTC
Group:
Size: 9151866
License:
Signature: (none)
Source RPM: R7ScanAssistant.src.rpm
Build Date: Thu 11 Aug 2022 10:21:24 PM UTC
Build Host: AUS-MBP-6346
Relocations: (not relocatable)
Packager: Rapid7
Vendor: Rapid7
URL:
Summary: Rapid7 Vulnerability Management (InsightVM) Scan Assistant
Description: Rapid7 Vulnerability Management (InsightVM) Scan Assistant
```

--------------------------------

### Installation verification output

Source: https://docs.rapid7.com/insightvm/scan-assistant-combined

Example output showing the results of the verification commands.

```text
> sudo pkgutil --pkgs=com.rapid7.scanassistant
com.rapid7.scanassistant

> sudo pkgutil --pkg-info com.rapid7.scanassistant
package-id: com.rapid7.scanassistant
version: 1.5.1.3
volume: /
location:
install-time: 1768384014

> ps -ef | grep scan-assistant
    0 23618     1   0  9:46a.m. ??         0:00.08 /Applications/Rapid7 Scan Assistant.app/Contents/MacOS/scan-assistant
  501 23726 23538   0  9:56a.m. ttys000    0:00.00 grep scan-assistant
```

--------------------------------

### Run Linux installer script

Source: https://docs.rapid7.com/insightvm/collector-installation-and-deployment

Execute the installer script to initiate the terminal-based installation wizard.

```bash
./InsightSetup-Linux64.sh
```

--------------------------------

### Installation output verification

Source: https://docs.rapid7.com/insightvm/scan-assistant-combined

Expected output after running the installer command to confirm a successful installation.

```text
> sudo installer -pkg ./R7ScanAssistant.amd64.pkg -target /
installer: Package name is Rapid7 Scan Assistant
installer: Installing at base path /
installer: The install was successful.
```

--------------------------------

### Start the Scan Engine service on Linux

Source: https://docs.rapid7.com/insightvm/configuring-distributed-scan-engines

Use this command to start the Scan Engine service after the installation wizard completes on a Linux host.

```bash
systemctl start nexposeengine.service
```

--------------------------------

### Log File Entry Example

Source: https://docs.rapid7.com/insightvm/troubleshooting

A concrete example of a log entry showing the Security Console startup event.

```text
2011-12-20T16:54:48 [INFO] [Thread: Security Console] Security Console started in 12 minutes 54 seconds
```

--------------------------------

### InstalledSoftware check

Source: https://docs.rapid7.com/insightvm/common-vulnerability-check-examples

An example of checking for the version of installed software using the InstalledSoftware element.

```xml
<InstalledSoftware>
    <Product minCertainty="1.0" name="Exchange 2000 Server" vendor="Microsoft">
      <version>
        <value>SP3</value>
      </version>
    </Product>
  </InstalledSoftware>
```

--------------------------------

### ActiveXControlInstalled check for ibm-access-support-activex-bof.vck

Source: https://docs.rapid7.com/insightvm/common-vulnerability-check-examples

Example of using the ActiveXControlInstalled element to verify the presence of an ActiveX control by its GUID.

```xml
<?xml version='1.0' encoding='UTF-8'?>
<VulnerabilityCheck id="ibm-access-support-activex-bof" scope="node" version="1.0">
   <ActiveXControlInstalled guid="74FFE28D-2378-11D5-990C-006094235084"/>
</VulnerabilityCheck>
```

--------------------------------

### Example proxy configuration in CustomEnvironment.properties

Source: https://docs.rapid7.com/insightvm/scan-engine-management-on-the-insight-platform

An example of how the proxy configuration lines should appear in the CustomEnvironment.properties file.

```properties
https.proxyHost=10.0.160.33
https.proxyPort=3128
```

--------------------------------

### Run Linux installer

Source: https://docs.rapid7.com/insightvm/insightvm-quick-start-guide

Execute the installer with the -c switch to run it in console mode.

```bash
./<installer_file_name> -c
```
Tokens:
Raw