Support
Scans

Scheduling Scans

This document is for:
Invicti Standard, Invicti Enterprise On-Premises, Invicti Enterprise On-Demand

Invicti enables you to schedule scans in advance. Both Full and Incremental scans can be scheduled. You can schedule one-off and recurrent scans, both individual scans and – in Invicti Enterprise – group scans. In Invicti Standard, you can also send a web security report when a scheduled scan is completed by using Powershell.

For further information, see Creating a New Scan.

Scheduling Scans in Invicti Enterprise

In Invicti Enterprise, you can schedule both full and incremental scans, as well as group scans. You can schedule a scan from any start time and have it repeated on a fixed or customized basis. All the same options  such as fixing the maximum scan duration and scan time window  are available with scheduled scans.

How to View Scheduled Scans in Invicti Enterprise

From the main menu, click Scheduling, then Scheduled Scans. The Scheduled Scans window is displayed.

How to Schedule a Full Scan in Invicti Enterprise

  1. From the main menu, click Scheduling, then Schedule Scan. The New Scheduled Scan window is displayed.

  1. Complete the fields as explained in Creating a New Scan.
  2. In the Scan Type field, select Full (default).
  3. In the Name field, enter a name.
  4. In the Start Time field, select the date and time.
  5. From the Schedule drop-down, select the required option.

  1. Complete the remaining Scan Options as outlined in Invicti Enterprise Scan Options Fields.
  2. Click Schedule.

How to Schedule an Incremental Scan in Invicti Enterprise

For information about scheduling incremental scans, refer to Setting up incremental scans.

How to Create a Scheduled Group Scan in Invicti Enterprise

  1. Open Invicti Enterprise.
  2. From the main menu, click Scheduling, then Schedule Group Scan. The New Scheduled Group Scan window is displayed.

  1. Complete the fields as explained in How to Run a Group Scan in Invicti Enterprise.
  2. Then, in the Scheduling Options section:
  • In the Name field, enter the new scheduled group scan name
  • In the Start Time field, click on the calendar symbol, and select the date and time
  • From the Schedule dropdown, select the relevant option
  1. Enable the Customize Max Scan Duration checkbox, if required

  1. Enable the Customize Scan Time Window checkbox, if required.

  1. Enable the Create PCI Scan checkbox, if required.
  2. Click Schedule.

How to Convert a Completed Scan Into a Scheduled Scan

  1. From the main menu, click Scans, then Recent Scans. The Recent Scans window is displayed.

  1. Select the checkbox next to the scan you want to convert, then click the Scan dropdown and select Scheduled Scan. The New Scheduled Scan window is displayed, with the original Scan Options already configured.
  2. Complete the remaining Scheduling Options fields as explained in How to Schedule a Full Scan in Invicti Enterprise.
  3. Click Schedule.

Invicti Enterprise Scheduled Scan Fields

This table lists and explains the columns in the Scheduled Scans window.

Field

Description

Scan Type

This indicates what type of scan will run. The options are:

  • Full
  • Incremental

Name

This is the name of the scheduled scan.

Start Time

This is the start date and time of the scheduled scan.

Schedule

This is the frequency of the scheduled scan. The options are:

  • Once
  • Daily
  • Weekly
  • Monthly
  • Yearly
  • Quarterly
  • Biannually
  • Custom

You can configure a bi-weekly schedule using the Custom option.

For further information about scan fields, see Creating a New Scan and Invicti Enterprise Scan Option Fields.

Scheduled Scans Fields

This table lists and explains the columns in the Scheduled Scans window.

Field

Description

Name

This is the name of the scheduled scan.

Website/Group

This is the website or group name for the websites scheduled for scanning.

Type

This is the type of object to be scanned, such as a group or a website.

Run Type

This is the frequency of the scan.

Last Scan

This is the time when the website was last scanned.

Next Execution Time

This is the time in days, hours and minutes when the next scan in the schedule will take place.

Tags

This is the label given to a scan to group and/or give additional context.

Filtering Scheduled Scans in Invicti Enterprise

Column Filters

All columns can be filtered, using a highly customizable combination of Fields, Operators, and Values. Each is explained below.

Filters & Values

This table lists the filters and values available for the columns listed above. Select an option to filter the list by that criterion.

  • In many cases, values can be entered into the value field; in others, the value can be selected from a drop-down menu.
  • You can enter more than one filter at a time.

Field

Description

Value

Name

Select to filter scan profiles by name.

Enter a value.

Website/Group

Select to filter scheduled scans by website name or group.

Enter a value.

Type

Select to filter scheduled scans by type.

The drop-down options are:

  • (Not Set)
  • Website
  • Website group

Run Type

Select to filter scheduled scans by run type.

The drop-down options are:

  • (Not Set)
  • Biannually
  • Custom
  • Daily
  • Monthly
  • Once
  • Quarterly
  • Weekly
  • Yearly

Last Scan

Select to filter scheduled scans by last scan time.

Select a date from the calendar picker.

Next Execution Time

Select to filter scheduled scans by the next scan time.

Select a date from the calendar picker.

Tags

Select to filter by tags

Enter a value.

Operator

This table lists and explains the Operators available for filtering columns. They work in conjunction with the Field, Operator, and Value.

Operator

Description

Equal

This operator can be used for exact matching.

Not Equal

This operator can be used to exclude some results based on exactly matching.

Contains

This operator can be used to include results if the filtered column contains the value. It does not matter where the value is. For example, you could filter for the word 'production'.

Not Contains

This operator can be used to exclude certain results on the Websites page.

Starts with

This operator can be used to filter for columns that begin with the value. For example, you could filter for Website fields that begin with the 'https://' scheme.

Ends with

This operator can be used to filter for columns that end with the value.

Less than

This operator can be used to filter columns that contain numeric and date-time values rather than string values. For example Initiate Time, Duration, or Finish Time.

Less than or equal

This operator can be used to filter columns that contain numeric and date-time values rather than string values. For example Initiate Time, Duration, or Finish Time.

Greater than or equal

This operator can be used to filter columns that contain numeric and date-time values rather than string values. For example Initiate Time, Duration, or Finish Time.

Greater than

This operator can be used to filter columns that contain numeric and date-time values rather than string values. For example Initiate Time, Duration, or Finish Time.

How to filter scheduled scans in Invicti Enterprise

  1. From the main menu, select Scans > Scheduled Scans.
  2. From the Scheduled Scans page, select the filter button ( ) next to any header column.
  3. Select Clear to clear all fields.
  4. Add a New Filter.
  5. In the relevant filter, where relevant:
  1. From the Field drop-down, select an option.
  2. From the Operator drop-down, select an option.
  3. In the Value field, enter a value.
  1. Select Apply.

Scheduling Scans in Invicti Standard

In Invicti Standard, you can schedule any scan. This includes both full and incremental scans, as well as scans on new or multiple instances of Standard. You can restrict a web security scan to run during a specific time using AutoHotkey. Additionally, Invicti Standard allows you to configure and send automated web security reports on completion of a scheduled scan.

How to Schedule a Full Scan in Invicti Standard

  1. Open Invicti Standard.
  2. From the ribbon, click the Home tab, then Schedule. The Schedule a New Scan dialog is displayed.

  1. Complete the Schedule a New Scan dialog.
  2. Click Schedule. The Overwrite dialog is displayed.

  1. Click Overwrite to save your current profile with the current name in order to create a new scheduled scan. The Schedule a Scan dialog is displayed.

  1. In Scheduled Task section:
  1. In the Name field, enter the name of the scan
  2. In the Run as User field, enter the user's name
  3. In the Password field, enter the password
  1. Enable the Run only when user is logged on checkbox, if required.
  2. In the Recurrence section:
  1. In the Run Scan on field, enter the date and time
  2. In the and repeat dropdown, select the recurrence option:
  • Never (Scan will run ONE TIME)
  • DAILY
  • WEEKLY
  • MONTHLY
  1. Enable the After scan, export these reports checkbox to activate scan exports, then from the dropdown, select which type of Report to export.
  2. In the Save location box, enter an alternative location, if required. Otherwise, the report will export to the default location on your local machine (C:\Users\[username]\Documents\Invicti\Reports\[report name] (Default-[date][time]).[ext]).
  3. Click Save.

How to edit a scheduled scan in Invicti Standard

  1. Press the Windows logo key .
  2. Search for Task Scheduler.
  3. From the Task Scheduler window, select Task Scheduler Library.
  4. Double-click Invicti - [name of the scheduled scan]. (This example uses Schedule.)

  1. From the Invicti - Schedule Properties window, select the Trigger tab.
  2. Select Edit.

  1. Make necessary changes to your scheduled scan(s).

  1. Select OK to save the changes.

How to Schedule an Incremental Scan in Invicti Standard

For more information about setting up incremental scans please refer to the Incremental scans document.

How to Restrict Web Security Scans in Invicti Standard to Run During a Specific Time

  1. Download and install AutoHotkey, an open source utility that can be used to find the running instance of Invicti Desktop, and trigger the keys that resumes and pauses scans.
  2. Download these AutoHotkey scripts, which will be used to pause and resume the web security scans.
  1. Configure all the scan parameters (such as Target URL, Scan Policy and Reports Policy).
  2. Launch the scan.
  3. Pause the scan as soon as it starts.
  4. Once the scan is paused configure two Windows Task Schedules:
  • one for resumenetsparker.ahk at the scan starting time
  • one for pausenetsparker.ahk at the scan finishing time

The scan will be resumed automatically when the first scheduled task starts, and if it is not finished by the finishing time, it will be paused automatically by the scheduled task

if_Gnome-Dialog-Information-64_55568.png

Information

You should have a single instance of Invicti Standard running. If you have more than one, the AutoHotKey scripts will work only one that you’re running, not necessarily the one you want to resume/pause.

Invicti Standard Scheduled Scan Fields

Field

Description

Previous Settings

From this drop down, you can select one of Invicti's predefined scan profiles, or your own saved profiles.

Sending Web Security Reports in Invicti Standard

Once a Scheduled Scan has been completed, you can email web security reports. This is done using Window's Powershell scripting, which automatically emails an attachment on completion of a Scheduled Scan.

How to Configure Automated Scheduled Scan Email Reports in Invicti Standard

  1. Download the files ScanAndMail.rar and urls.txt files from Invicti.
  2. Copy the files ScanAndMail.ps1 and urls.txt files to the Invicti installation folder on your local machine.
  3. Open ScanAndMail.ps1 with a text editor and specify the SMTP server and mail settings from lines 3 to 11.
  4. Open urls.txt with a text editor, and specify the URL of the web application you would like to scan and the path of where to save the scan report, separated with a semicolon. To scan multiple websites, specify the same parameters for each website in a new line.
  5. Once all the settings are configured, use Powershell to execute the script, which creates a Windows Scheduled Task and launches the scan(s):

Powershell –ExecutionPolicy Unrestricted –File "C:\Program Files (x86)\Invicti\ScanAndMail.ps1

if_Gnome-Dialog-Information-64_55568.png

Information

The installation folder of Invicti Standard in a 32 bit Window installation is c:\Program Files\Invicti.

Invicti Help Center

Our Support team is ready to provide you with technical help.

Go to Help Center This will redirect you to the ticketing system.