steampipe plugin install urlscan

Table: urlscan_global - Query Urlscan Global Data using SQL

The Urlscan Global Data is a resource that provides an overview of the scan results from Urlscan. It includes data such as the overall status of the scan, task details, page metadata, and other associated information. This data is valuable for understanding the general outcome and details of the scans performed by Urlscan.

Table Usage Guide

The urlscan_global table provides insights into the global scan data within Urlscan. As a security analyst, explore scan-specific details through this table, including the overall status, task details, and page metadata. Utilize it to uncover information about the scans, such as the overall results, the details of the tasks performed, and the metadata of the scanned pages.

Important Notes

  • You must specify the scan in the where clause to query this table.

Examples

List global variables

Analyze the settings to understand the global variables associated with a particular scan. This can be useful for identifying potential areas of concern or improvement within a specific scan process.

select
property,
type
from
urlscan_global
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
property;
select
property,
type
from
urlscan_global
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
property;

Schema for urlscan_global

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
propertytextProperty name of the global variable.
scantext=ID of the scan result.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
typetextType of the global variable.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan

You can pass the configuration to the command with the --config argument:

steampipe_export_urlscan --config '<your_config>' urlscan_global