Include specific paths when searching for applications

Summary

A new UI setting is being made available allowing you to use the ‘find’ command of an application detection plugin to search a specific path for files.

Change

Application detection plugins can search for files that identify the version of the installed application. By default they search common locations where these applications are found. Based on your organizational security policy, applications may be installed in nonstandard locations.

A new Advanced policy setting in Nessus, T.io, and T.sc named "Include Filepath" is being added under Unix find command Options. This new setting allows you to add paths to be searched for applications when using the ‘find’ command.

The format of the file to be uploaded here is the same as the “Exclude Filepath” setting.

Impact

You will be able to specify locations to search if your application stack is not covered by default search paths.

Use of this setting will increase the locations searched, which will extend the duration of the scan. Inclusions should be as specific as possible.

Affected Plugins

All plugins that use ‘find’.

Target Release Date

16 December 2020

Tenable Research Release Highlights are posted in advance of significant new releases or updates to existing plugins or audit files that are important for early customer notification.