l-teles/detectify
steampipe plugin install l-teles/detectify

Table: detectify_policy

This table contains information about policies and the assets that are breaching those policies.

The token_v3 argument is required to use this table, meaning you need to create an API key for v3 on Detectify.

Examples

List all policies

select
policy_name,
asset_name,
severity,
active,
status
from
detectify_policy;

List the domains that are currently breaching policies

select
policy_name,
asset_name,
severity,
active,
status
from
detectify_policy
where
active = 'true';

Count assets by policy and status

select
count(*) as assets,
policy_name,
status
from
detectify_policy
group by
policy_name,
status;

Schema for detectify_policy

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
activebooleanIndicates if the item is active.
asset_idtextID of the asset.
asset_nametextName of the asset.
disappeared_attimestamp with time zoneTimestamp when the item disappeared.
first_seen_attimestamp with time zoneTimestamp when the item was first seen.
idtextUnique ID of the item.
policy_idtextID of the policy.
policy_nametextName of the policy.
severitytextSeverity level.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
statustextStatus of the item.
status_updated_attimestamp with time zoneTimestamp when the status was last updated.