Nessus Agent Key

Description

General

Documentation: https://docs.tenable.com/nessus-agent/Content/GettingStarted.htm
Summary: Tenable Nessus Agents identify vulnerabilities, policy violations, misconfigurations, and malware on the hosts where they are installed and report results back to the managing product (Tenable Nessus Manager or Tenable Vulnerability Management). The agent is linked to the product via a linking key, retrieved from the product interface.
IPs allowlist: This feature is not available.
Scopes: There is one linking key by product, its scope is solely for linking purposes.

Revoke the secret

It is possible to regenerate a linking key from the managing product. See Tenable Nessus Manager documentation for instance.

Check for suspicious activity

This feature is not available.

Details for `Nessus agent key`

Family: Api
Category: Monitoring
Company: Tenable
High recall: False
Validity check available: False
Minimum number of matches: 1
Occurrences found for one million commits: 0.05
Prefixed: False
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - nessuscli
    - nessusagent\.msi
- type: ContentWhitelistPreValidator
  patterns:
    - key

Examples

# linux syntax
- text: |
    +/opt/nessus_agent/sbin/nessuscli agent link --key=afdc01d8541ef14a81b80715e8255228e53e87a96048d13f533dc3e099f64593 --groups="COPPI-Oracle-Environment" --host=nessus-manager-cluster.pcs.nl.eu.abnamro.com --port=8834
  apikey: afdc01d8541ef14a81b80715e8255228e53e87a96048d13f533dc3e099f64593
# mac syntax
- text: |
    sudo /Library/NessusAgent/run/sbin/nessuscli agent link --key=23a87832c27177274bd837318f7e22032e4011bec11781209cbbf8ddc4976c4f --name=MyOSXAgent --groups=All --host=yourcompany.com --port=8834
  apikey: 23a87832c27177274bd837318f7e22032e4011bec11781209cbbf8ddc4976c4f
# windows syntax
- text: |
    +msiexec /i C:\Windows\Setup\Apps\NessusAgent.msi NESSUS_GROUPS="windows" NESSUS_SERVER="cloud.tenable.com:443"  NESSUS_KEY="23a87832c27177274bd837318f7e22032e4011bec11781209cbbf8ddc4976c4d"
  apikey: '23a87832c27177274bd837318f7e22032e4011bec11781209cbbf8ddc4976c4d'