Links

Quick Starts

Whether you are a seasoned security professional or just starting in the world of cybersecurity, PlexTrac is here to assist in managing vulnerabilities, collaborating with your team, and enhancing your overall security posture.
This page is a condensed guide to everyday PlexTrac tasks to orientate users with streamlined instructions and critical information to simplify onboarding, highlight essential features, and reduce the learning curve.

Producing a Report

This scenario covers creating a report, importing findings from a file, and producing a Word document to review or deliver to stakeholders.
Prerequisites
The user belongs to a role with the ability to add a finding and create, edit, and export a report.
Step 1: Create the Report
a. Go to the Reports module and click Create Report.
b. Select the client from the pulldown menu.
c. Enter a report name. Other fields are optional but relevant to exporting. If using a report template or findings layout, associate those files with the report now (they must already exist).
d. Select any operators or reviewers, if applicable.
e. Add a start and end date, desired tags, raw evidence, or custom fields.
f. Click Submit. The report is now created, and the report Readout tab is presented.
Step 2: Import Findings
a. Click the Findings tab of the report.
b. Click Add Findings, then select File Imports.
c. Select the import source of the file from the pulldown menu, then navigate to the file on the local system. Click Continue.
d. Add any desired tags, then click Upload. The findings now appear on the page for further management.
Step 3: Export the Report
a. Click Export at the top right of the report page, then select Word.
b. A modal appears to inform that a custom layout that requires empty fields by default was used. If the data is complete, click Export.
c. Navigate to the designated download location on the local system to access the Word document.

Assigning a Report Review

This scenario covers leveraging reviewers to a report to obtain feedback before export.
Prerequisites
User A belongs to a role with the ability to assign report reviewers.
User B can change the report status.
Step 1: Add Reviewers (User A)
a. Go to the Reports module and click the desired report.
b. Click the Details tab.
c. Insert the cursor into the text box under "Report Reviewer" and type the name to filter options.
d. Select one or more reviewers.
e. Click Save.
The report is now listed on the reviewer's Dashboard under "Your reports."
Step 2: Review the Report (User B)
a. Go to the Dashboard. The report is listed on the "Your reports" tab, indicating the user's assigned role as "Reviewer."
b. Click the report and review.
c. On the Details tab, change the report status to "Approved." The status changes and is viewable by all users.
Step 3: Export the Report
a. Click Export at the top right of the report page, then select Word.
b. A modal appears to inform that a custom layout that requires empty fields by default was used. If the data is complete, click Export.
c. Navigate to the designated download location on the local system to access the Word document.

Creating a Parser Action

This scenario covers the setup of a parser action for an imported file.
Prerequisites
The user is an admin.
Step 1: Import File
a. Click Parser Actions in the "Tools & Integrations" section of the Admin Dashboard.
b. Check the Enable Parser Plugin Actions box.
c. Click Import.
d. Select the source of the file to import from the "Import Source" pulldown menu, then drag the file into the drop area on the modal or click Browse to navigate to the file on the computer.
e. Click Upload.
Progress will be displayed as the upload occurs, with a confirmation provided when completed.
Step 2: Configure Parser
a. Select the tool that the imported file was sourced from the "Filter Plugins" pulldown menu.
b. Search or select the desired plugin by clicking the check box to the far left of the row.
c. Select the desired action to occur. "Default" allows for severity changes, while "Ignore" will result in the finding not being imported. If the action is changed, it will be reflected in the "Action" column of the plugin.
d. Changed the plugin severity by clicking the "Severity" pulldown menu and selecting the desired value.
e. Link to a writeup by clicking the "Link Writeup" pulldown menu and selecting the desired writeup. This association overrides the description, title, references and recommendations when this finding is imported. Multiple plugins with the same writeup will be mapped to a single finding with merged affected assets.

Adding Users

This scenario covers the process of an admin adding users to PlexTrac.
Prerequisites
The person adding the users to PlexTrac has admin permissions.
Step 1: Add Users
a. Click Users in the "Security & User Management" section of the Admin Dashboard.
b. Click Add Users.
c. Enter the email, first name and last name of the user. The new user will receive an email containing instructions for setting up a password based on the email provided. Therefore, ensuring that the email is accurate and not already used by the system is crucial.
d. If the user should have access to all clients by default, select the "Default Group" checkbox. Whenever a new client is created, these users are automatically assigned access.
A confirmation message is provided at the bottom of the page. The new user is now listed with a dynamically generated user ID.