Product Documentation
Role-Based Access Control
Creating/Editing a Finding
There are several fields which are directly editable fields that can be modified on creation of a finding through adding it as a Custom Finding or through editing it after import from a Scanner or from the WriteupsDB. Below goes over those fields for reference.
Create/Edit Findings
There are many fields available in findings. You can view them by editing your finding:
There are these Four categories: Finding Details, Affected Assets, Custom Fields, Screenshots/Videos, Code Samples.
Also notice you can change the Published status of individual findings using the toggle at the top.
Finding Details
Title, Severity, Status, Sub-Status, Assigned To, Score, Dates
Title is required. Sub-status' can be defined in the Admin Module.
Description, Recommendations, References, Tags
To tag your findings for Analytics or for your reporting purposes, refer to your Jinja Readme provided, your Jinja Code, or leaderships tagging schema. To tag a finding, the bottom of the finding will have lowercase, with no spaces, text that will 'tag' the finding.
Affected Assets
This is where you can add/remove, or create assets associated to this finding. For scan findings, this section may be populated on import from the Scanner or Tool output.
Raw Evidence: this will include the scanner data imported with a Tool Output in your Report when Exported. An example would be the Nessus output from a Nessus Scan.
To add an asset, click the Create New Asset button and fill out the fields. To add that asset to this finding, make sure to check the Add to Flaw check box near the bottom of the module.
Custom Fields
For more specifics on this, see Add Custom Fields. In general, these fields are populated from your associated Fields Template, and defined in your Jinja Template Readme or code.
Screenshots/Videos
Code Samples
Last modified 1yr ago