steampipe plugin install urlscan

Table: urlscan_console - Query Urlscan Console using SQL

Urlscan Console is a part of Oracle Cloud Infrastructure's security services. It allows users to perform security scans and provides detailed analysis of the scan results. The console aids in identifying security threats, vulnerabilities, and helps in maintaining the overall security posture of your resources.

Table Usage Guide

The urlscan_console table provides insights into the scan results within Urlscan Console. As a security analyst, explore scan-specific details through this table, including vulnerabilities, associated metadata, and related information. Utilize it to uncover information about potential threats and vulnerabilities, and to verify the security posture of your resources.

Important Notes

  • You must specify the scan in the where clause to query this table.

Examples

List console messages in order

Analyze the sequence of console messages to gain insights into the progression of events for a specific scan. This can be useful for troubleshooting or understanding the behavior of a system.

select
*
from
urlscan_console
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
rank;
select
*
from
urlscan_console
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
rank;

List warnings and errors from the console

Explore the instances where warnings and errors have been logged in a specific system scan. This query is useful in identifying potential issues and prioritizing them based on their severity for swift remediation.

select
*
from
urlscan_console
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
and level in ('warning', 'error')
order by
rank;
select
*
from
urlscan_console
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
and level in ('warning', 'error')
order by
rank;

Schema for urlscan_console

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
columnbigintColumn of code on the line that generated the console message.
leveltextLevel of the console message, e.g. log, warning.
linebigintLine of code that generated the console message.
rankbigintRank of the console message, used to maintain order.
scantext=ID of the scan result.
sourcetextSource of the console message.
texttextText of the console message.
urltextURL of file that generated the console message.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan

You can pass the configuration to the command with the --config argument:

steampipe_export_urlscan --config '<your_config>' urlscan_console