NVD

NVD is a Vulnerability Database integration. Vulnerability Database Data Source integrations are used during investigations to improve analysis and in interactive chat to help answer questions. They are optional, but enabling more tooling integrations enhances Dropzone analysis.

Dropzone integrates with NVD to search for CVEs (Common Vulnerabilities and Exposure) as part of investigations. CVEs contain descriptions of vulnerabilities, severity scores, and references to related advisories or solutions that are used to improve investigation and remediation recommendations.

Create an API Key

NVD requires an API key to enable.

To obtain an API Key, do the following:

• Navigate to https://nvd.nist.gov

• Click on the plus next to "Developers" in the left navigation

• Click on "Request an API Key"

Lefthand Navigation

• Follow the instructions provided to request an API Key

Request an API Key

• You should receive an email with a link to your API key:

Your NVD API Key

Enable NVD

To enable the Data Source integration, do the following:

• Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.ai

• Click System > Integrations

Integrations Dropdown

• Click "Data Sources" in the top left corner

Select the "Data Sources" button

• In the VULNERABILITY DB section, find the NVD tile

The NVD Data Source Tile

• Click "Configure"

• Input the API key

• Click "Test & Save"

The NVD Data Source Configuration

If you have any errors engage your Dropzone AI support representative.