Table: urlscan_console - Query Urlscan Console using SQL

Urlscan Console is a part of Oracle Cloud Infrastructure's security services. It allows users to perform security scans and provides detailed analysis of the scan results. The console aids in identifying security threats, vulnerabilities, and helps in maintaining the overall security posture of your resources.

Table Usage Guide

The urlscan_console table provides insights into the scan results within Urlscan Console. As a security analyst, explore scan-specific details through this table, including vulnerabilities, associated metadata, and related information. Utilize it to uncover information about potential threats and vulnerabilities, and to verify the security posture of your resources.

Important Notes

You must specify the scan in the where clause to query this table.

Examples

List console messages in order

Analyze the sequence of console messages to gain insights into the progression of events for a specific scan. This can be useful for troubleshooting or understanding the behavior of a system.

select
  *
from
  urlscan_console
where
  scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
  rank;

select
  *
from
  urlscan_console
where
  scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
  rank;

List warnings and errors from the console

Explore the instances where warnings and errors have been logged in a specific system scan. This query is useful in identifying potential issues and prioritizing them based on their severity for swift remediation.

select
  *
from
  urlscan_console
where
  scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
  and level in ('warning', 'error')
order by
  rank;

select
  *
from
  urlscan_console
where
  scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
  and level in ('warning', 'error')
order by
  rank;

Schema for urlscan_console

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
column	bigint		Column of code on the line that generated the console message.
level	text		Level of the console message, e.g. log, warning.
line	bigint		Line of code that generated the console message.
rank	bigint		Rank of the console message, used to maintain order.
scan	text	=	ID of the scan result.
source	text		Source of the console message.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
text	text		Text of the console message.
url	text		URL of file that generated the console message.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan

You can pass the configuration to the command with the --config argument:

steampipe_export_urlscan --config '<your_config>' urlscan_console