I want to run a report to show vulnerability remediation trending over a period of time. I am looking to exclude zero day vulns from the data set. Other than putting the QID of all known zero days into a search list, is there an easy way to do this?
I don't know if there's an automated method to exactly achieve what you are looking for. What I would do is to create a dynamic search list for vulnerabilities with "zero day" in the title and exclude that search list in the report.
But this would only work if Qualys consequently puts "zero day" in the vulnerability title; don't know for sure if that's the case.
Retrieving data ...