Working with Custom Assessment Tests

SecureSphere provides you with the ability to configure a custom assessment tests which integrate custom queries to search for specific conditions that may be unique to your environment. Once a custom assessment test has been created, it becomes available with new assessment policies based on the database configured in the custom assessment test. You can then create a new assessment policy, which then includes the custom assessment as one of its tests. The test is then run as part of an assessment. If it results in a failure, a vulnerability is created based on the test name.

An example of a custom assessment test would be creating a custom query that searches for users with database administrator privileges. Finding this data would result in the test failing. The assessment test would then continue to query information regarding the failure, in this case DBA user names and privileges.

The following table lists the steps involved in preparing a custom assessment and making it part of an assessment policy.

Using Custom Assessments - Task Overview