Qualys Integration and correlation question
I have Qualys vulnerability data feeding into enVision and I am able to query the assets and see what type of vulnerabilities each has at a very high level. Is there anything more that I can do to perhaps build correlation rules and somehow integrate Qualys data ? Can this even be done ?? ...If so, can you post an example of a correlated alert that utilizes Qualys data ? Even better, could you post an example of a correlated alert that contains an IPS event (or some other event) and Qualys data ?
If anyone has integrated Qualys vulnerability data or any other vulnerability data into enVision ...can you list the top 5 or 10 benefits that you get from this type of integration....
I guess I'm trying to link IPS alerts with Vulnerability data to get better results or improved results...