### Processing Scan Results

The results of the Nessus scan can be exported in various ways, allowing for data review, analysis, and reporting in different environments. Here are a few ways to export scan results from Nessus.

**Reporting through Nessus:**

- Nessus enables generating reports directly from its user interface. You can select different report templates and customize the reports according to your needs. Reports can be saved and printed in various formats such as PDF, HTML, and CSV.

**Export Results to CSV or Nessus XML files:**

- You can export the scan results from Nessus as CSV (Comma-Separated Values) or Nessus XML files. This enables the opening and examination of the results in other applications or their integration into other cybersecurity tools.

**Syslog Integration:**

- You can configure Nessus to send scan results to a Syslog server. This allows for the transfer of data from Nessus to other security management systems or for data flow analysis.

**API integration:**

- Nessus provides a RESTful API that allows for retrieving results and integrating with other applications. With the API, you can automate the generation of reports, initiation of scans, and management of results.

Exporting data from Nessus using methods other than traditional ones provides flexibility and enables efficient use of the results in various cybersecurity auditing processes within your organization.

### Reporting

Nessus offers an easy way to generate reports from scan results. By selecting the completed scan from the top right corner *Report* menu will open for you with the following appearance.

![](sanity:image-a6ca68a8a4379fe925b534241090b7550782d853-1091x678-png)

Nessus reporting provides several different templates, and below is an explanation of four different reporting templates:

**Complete List of Vulnerabilities by Host:**

- This reporting model provides a comprehensive list of all detected vulnerabilities, categorized by host. Each host includes a detailed list of detected vulnerabilities, including their risk level, description, and other significant information. This model helps organizations understand the vulnerabilities and their extent across different systems.

**Detailed Vulnerabilities by Host:**

- This template provides more detailed information about vulnerabilities detected by hosts. It includes technical details, impacts, and possible mitigation measures for each vulnerability. This more detailed information helps the security team prioritize and address vulnerabilities more effectively.

**Detailed Vulnerabilities by Plugin:**

- This report template focuses on distributing vulnerabilities according to the types of Nessus plugins that have detected them. Vulnerabilities that are visible in each report are classified according to the type of extension through which they have been identified. This information helps understand what security services or scanning extensions should be particularly considered.

**Vulnerability Operations:**

- This template provides an overview of vulnerability management-related actions. It may include information such as the number of detected vulnerabilities over time, progress in removing specific vulnerabilities, and other functional analyses. This template helps the organization monitor the effectiveness of the vulnerability management process and develop strategies for more efficient handling.

### Questions

You can use the environment below to answer the questions.

@exercise a6f1c8b4e308

@exercise 967e48c6d435


Note! - Sorry, Nessus is still in beta and it takes about 5 minutes to start up. _BUT_ you don't have to turn off the lab in between when you move on to the next task.

Nessus exercise

Processing of scan results

Nessus is a widely used security assessment tool designed to identify vulnerabilities and weaknesses in computer systems, networks and applications.

Nessus is a widely used cybersecurity assessment tool designed to identify vulnerabilities and weaknesses in computer systems, networks, and applications.

Processing of scan results

Learn to hack — start here