cybersecurity

The original post: /r/cybersecurity by /u/2hinreza on 2025-06-25 08:08:49.

Hey folks,

My company wants to create a combined vulnerability assessment report by merging data from Nessus and CrowdStrike.

Here’s the challenge:

• Nessus reports are plugin-based, meaning vulnerabilities are identified and described based on specific plugins.
• CrowdStrike, on the other hand, reports vulnerabilities using CVE identifiers.

We want to integrate both data sources into a single, simplified report that’s easy to understand and actionable for the security team.

Has anyone done something like this? What’s the best approach or tools you’d recommend for mapping plugin IDs to CVEs or merging these different formats? Any tips on report formats or automation ideas?

Thanks in advance for any insights!