Creating an endpoint scan schedule in the Vulnerability Management module (VM)

Go to Yandex Security Deck.

In the left-hand panel, select  Vulnerability management.

At the top of the window, select the correct workspace.

Go to the Scan schedules tab and click New scan. In the window that opens:

1. Under Target group, configure the scan settings for the target group:

   • In the Resources field, select:

     • All resources: For the target group to include targets residing within Yandex Cloud resources across the entire Vulnerability Management scope defined in the workspace.

     • Selected resources: To restrict the target discovery scope to specific Yandex Cloud resources.

       Click Select resources to select individual clouds and folders for analysis.

   • In the Addresses field, select:

     • No limit: To scan all possible paths on the discovered endpoints.

     • Ignore addresses: To specify addresses to exclude from scanning.

       The field supports string values containing a partial path or a regular expression, e.g., /api or [?&](token|auth)=([^&]+).

       One field must contain exactly one exclusion. As you type an exclusion into the field, a new field appears automatically for your next exclusion.

2. Under Scan type, select the correct scan mode:

   • Advanced attack surface analysis: To scan for additional targets that may have been missed during the basic analysis. For more information on this scan mode, see Advanced attack surface analysis.

   • Vulnerability scanning: To perform deep signature scanning and attack testing to detect various types of vulnerabilities and threats. For more information on this scan mode, see Deep vulnerability scanning.

     Optionally, click Advanced module configuration to select specific modules (analysis methods) to apply during deep vulnerability scanning.

3. Under Launch settings, set the basic schedule parameters:

   • In the Run field, select how often to run scans under the current schedule:

     • Every 7 days
     • Every 14 days
     • Every 30 days
     • Custom interval in days
   • Set the Schedule name.

4. Click Create scan.