Scheduling Scans

Invicti enables you to schedule scans in advance. Both Full and Incremental scans can be scheduled. You can schedule one-off and recurrent scans, both individual scans and – in Invicti Enterprise – group scans. In Invicti Standard, you can also send a web security report when a scheduled scan is completed by using Powershell.

For further information, see Creating a New Scan.

Scheduled Scans Fields

This table lists and explains the columns in the Scheduled Scans window.

Scheduling Scans in Invicti Enterprise

In Invicti Enterprise, you can schedule any scan. This includes both full and incremental scans, as well as group scans. You can schedule a scan from any start time, and have it repeated on a fixed or customized basis. All the same options – such as fixing the maximum scan duration and scan time window – are available with scheduled scans.

Invicti Enterprise Scheduled Scan Fields

This table lists and explains the columns in the Scheduled Scans window.

For further information about scan fields, see Creating a New Scan and Invicti Enterprise Scan Option Fields.

How to View Scheduled Scans in Invicti Enterprise

From the main menu, click Scheduling, then Scheduled Scans. The Scheduled Scans window is displayed.

How to Schedule a Full Scan in Invicti Enterprise

1. From the main menu, click Scheduling, then Schedule Scan. The New Scheduled Scan window is displayed.

2. Complete the fields as explained in Creating a New Scan.
3. In the Scan Type field, select Full (default).
4. In the Name field, enter a name.
5. In the Start Time field, select the date and time.
6. From the Schedule dropdown, select the required option.

7. Complete the remaining Scan Options as outlined in Invicti Enterprise Scan Options Fields.
8. Click Schedule.

How to Schedule an Incremental Scan in Invicti Enterprise

1. From the main menu, click Scheduling, then Schedule Scan. The New Scheduled Scan window is displayed.
2. In the Target URL field,enter the URL, including the path.
3. In the Scan Type field, click Incremental. (This hides the Scan Options section.)

4. Complete the Scheduling Options as explained in How to Schedule a Full Scan in Invicti Enterprise.
5. Click Schedule.

How to Create a Scheduled Group Scan in Invicti Enterprise

1. Open Invicti Enterprise.
2. From the main menu, click Scheduling, then Schedule Group Scan. The New Scheduled Group Scan window is displayed.

3. Complete the fields as explained in How to Run a Group Scan in Invicti Enterprise.
4. Then, in the Scheduling Options section:
   • In the Name field, enter the new scheduled group scan name
   • In the Start Time field, click on the calendar symbol, and select the date and time
   • From the Schedule dropdown, select the relevant option
5. Enable the Customize Max Scan Duration checkbox, if required.

6. Enable the Customize Scan Time Window checkbox, if required.

7. Enable the Create PCI Scan checkbox, if required.
8. Click Schedule.

How to Convert a Completed Scan Into a Scheduled Scan

1. From the main menu, click Scans, then Recent Scans. The Recent Scans window is displayed.

2. Select the checkbox next to the scan you want to convert, then click the Scan dropdown and select Scheduled Scan. The New Scheduled Scan window is displayed, with the original Scan Options already configured.
3. Complete the remaining Scheduling Options fields as explained in How to Schedule a Full Scan in Invicti Enterprise.
4. Click Schedule.

Filtering Scheduled Scans in Invicti Enterprise

Column Filters

All columns can be filtered, using a highly customizable combination of Fields, Operators, and Values. Each is explained below.

Filters & Values

This table lists the filters and values available for the columns listed above. Select an option to filter the list by that criterion.

• In many cases, values can be entered into the value field; in others, the value can be selected from a drop-down menu.
• You can enter more than one filter at a time.

Operator

This table lists and explains the Operators available for filtering columns. They work in conjunction with the Field, Operator, and Value.

How to filter scheduled scans in Invicti Enterprise

1. From the main menu, select Scans > Scheduled Scans.
2. From the Scheduled Scans page, select the filter button ( ) next to any header column.
3. Select Clear to clear all fields.
4. Add a New Filter.
5. In the relevant filter, where relevant:

• From the Field drop-down, select an option.
• From the Operator drop-down, select an option.
• In the Value field, enter a value.

6. Select Apply.

Scheduling Scans in Invicti Standard

In Invicti Standard, you can schedule any scan. This includes both full and incremental scans, as well as scans on new or multiple instances of Standard. You can restrict a web security scan to run during a specific time using AutoHotkey. Additionally, Invicti Standard allows you to configure and send automated web security reports on completion of a scheduled scan.

Invicti Standard Scheduled Scan Fields

How to Schedule a Full Scan in Invicti Standard

1. Open Invicti Standard.
2. From the ribbon, click the Home tab, then Schedule. The Schedule a New Scan dialog is displayed.

3. Complete the Schedule a New Scan dialog.
4. Click Schedule. The Overwrite dialog is displayed.

5. Click Overwrite to save your current profile with the current name in order to create a new scheduled scan. The Schedule a Scan dialog is displayed.

6. In Scheduled Task section:
   1. In the Name field, enter the name of the scan
   2. In the Run as User field, enter the user’s name
   3. In the Password field, enter the password

7. Enable the Run only when user is logged on checkbox, if required.
8. In the Recurrence section:
   1. In the Run Scan on field, enter the date and time
   2. In the and repeat dropdown, select the recurrence option:
      • Never (Scan will run ONE TIME)
      • DAILY
      • WEEKLY
      • MONTHLY

9. Enable the After scan, export these reports checkbox to activate scan exports, then from the dropdown, select which type of Report to export.
10. In the Save location box, enter an alternative location, if required. Otherwise, the report will export to the default location on your local machine (C:\Users\[username]\Documents\Invicti\Reports\[report name] (Default-[date][time]).[ext]).
11. Click Save.

How to edit a scheduled scan in Invicti Standard

1. Press the Windows logo key .
2. Search for Task Scheduler.
3. From the Task Scheduler window, select Task Scheduler Library.
4. Double-click Invicti – [name of the scheduled scan]. (This example uses Schedule.)

5. From the Invicti – Schedule Properties window, select the Trigger tab.
6. Select Edit.

7. Make necessary changes to your scheduled scan(s).

8. Select OK to save the changes.

How to Schedule an Incremental Scan in Invicti Standard

1. Open Invicti Standard.
2. On the Home tab, click Schedule Incremental. The Import dialog is displayed.
3. In the Import dialog, select the filename of your already completed scan and click Open. The Schedule a New Scan dialog is displayed.
4. Complete the fields.
5. Click Schedule Scan.

How to Restrict Web Security Scans in Invicti Standard to Run During a Specific Time

1. Download and install AutoHotkey, an open source utility that can be used to find the running instance of Invicti Standard, and trigger the keys that resumes and pauses scans.
2. Download these AutoHotkey scripts, which will be used to pause and resume the web security scans.
   • resumenetsparker.ahk
   • pausenetsparker.ahk

3. Configure all the scan parameters (such as Target URL, Scan Policy and Reports Policy).
4. Launch the scan.
5. Pause the scan as soon as it starts.
6. Once the scan is paused configure two Windows Task Schedules:
   • one for resumenetsparker.ahk at the scan starting time
   • one for pausenetsparker.ahk at the scan finishing time

The scan will be resumed automatically when the first scheduled task starts, and if it is not finished by the finishing time, it will be paused automatically by the scheduled task.

You should have a single instance of Invicti Standard running. If you have more than one, the AutoHotKey scripts will work only one that you’re running, not necessarily the one you want to resume/pause.

Sending Web Security Reports in Invicti Standard

Once a Scheduled Scan has been completed, you can email web security reports. This is done using Window’s Powershell scripting, which automatically emails an attachment on completion of a Scheduled Scan.

How to Configure Automated Scheduled Scan Email Reports in Invicti Standard

1. Download the files ScanAndMail.rar and urls.txt files from Invicti.
2. Copy the files ScanAndMail.ps1 and urls.txt files to the Invicti installation folder on your local machine.
3. Open ScanAndMail.ps1 with a text editor and specify the SMTP server and mail settings from lines 3 to 11.
4. Open urls.txt with a text editor, and specify the URL of the web application you would like to scan and the path of where to save the scan report, separated with a semicolon. To scan multiple websites, specify the same parameters for each website in a new line.
5. Once all the settings are configured, use Powershell to execute the script, which creates a Windows Scheduled Task and launches the scan(s):

Powershell –ExecutionPolicy Unrestricted –File "C:\Program Files (x86)\Invicti\ScanAndMail.ps1

The installation folder of Invicti Standard in a 32 bit Window installation is C:\Program Files\Invicti.