The WriteUpsDB module has two tabs:

• Repositories: Displays all writeup repositories that exist in a tenancy. A repository can be Open, Managed, or Private.

• Writeups: Displays all writeups in various repositories, including those created manually and imported.

Repositories Tab

By default, PlexTrac provides a default repository container to contain any existing writeups. This repository can be renamed, modified, and deleted.

Once added, any extra repositories will be displayed on the page alphabetically according to their title.

Each repository card provides the following information:

1. Repository Title

2. Repository Type: Open, Managed, or Private

3. Meatballs Menu: options to copy or delete the repository

4. Repository Description

5. Number of contained writeups

6. Number of added users

Writeups Tab

Click the Writeups tab to view all writeups for a tenancy. This view will display useful information such as the writeup ID, parent repository, writeup severity, source, assigned tags, and the ability to edit, copy, or delete any selected writeup.

Bulk Actions

When editing multiple reports, PlexTrac offers bulk action capabilities. Bulk actions provide several advantages, including time-saving and increased efficiency by processing numerous items simultaneously.

Bulk action options appear after one or more writeups are selected by clicking the checkbox to the far left of the Title field or by clicking the box next to the column header.

Click Actions to see the list of options.

Configuring Views

The table view can be customized by clicking the column view icon to the right of the search bar.

Once clicked, a modal appears that lists all fields. To remove a column, click X within the bar.

When fields are removed, an "Add Column" pulldown menu is added at the bottom left of the modal to store the field. Any removed fields can be added later by clicking Add Column and selecting the field to add.

This modal represents the sequence of fields provided in the table, meaning the bar on top will be the column on the table's far left.

The order of columns can be adjusted within this modal by clicking the six dots on the left of the bar for a field and dragging the bar to the desired sequence place.

Click Save when finished.

A repository is a versatile tool for managing writeups. It organizes content into structured categories, allowing for efficient reuse across reports. Repositories grant varying access permissions, enhancing collaboration and control.

Changing Settings

Step 1: From the WriteupsDB module home page, click the repository card to update.

Step 2: Click Repository Settings.

All fields that existed when creating the repository are available for editing, with an additional button to delete the repository.

Step 3: Click Submit when finished.

Copying a Repository

Step 1: From the Repositories tab of the WriteupsDB module, click the meatballs menu found on the repository card.

Step 2: Click Copy Repository.

Step 3: Change the repository name, add a section ID, update the description as needed, and validate access permissions. Click Save.

The new repository is created and listed on the Repositories tab.

Deleting a Repository

A repository can be deleted in two ways:

A warning message will appear asking for validation. Click Delete to continue.

Configuring Views

The table view can be customized by clicking the column view icon to the right of the search bar.

Once clicked, a modal appears that lists all fields. To remove a column, click X within the bar.

When fields are removed, an "Add Column" pulldown menu is added at the bottom left of the modal to store the field. Any removed fields can be added later by clicking Add Column and selecting the field to add.

This modal represents the sequence of fields provided in the table, meaning the bar on top will be the column on the table's far left.

The order of columns can be adjusted within this modal by clicking the six dots on the left of the bar for a field and dragging the bar to the desired sequence place.

Click Save when finished.

Writeups can be copied within the WriteupsDB module or from a finding within a report.

Copying a Writeup Within a Report

Step 1: Within a report, click the Findings tab.

Step 2: Find the finding to copy. Click the meatballs menu (three dots) under "Actions" and click Copy to WriteupsDB.

Step 3: Select the repository from the pulldown menu and click Copy.

Copying within WriteupsDB

Step 1: From the WriteupsDB module, go to the writeup to copy and click Copy To under the "Actions" column.

Step 2: Select the destination repository from the pulldown menu and click Copy.

Step 1: From a report, click the Findings tab.

Step 2: Click Add Findings and select "From WriteupsDB" from the pulldown menu.

Step 3: Search or use the provided pulldown filters to display the desired writeups(s) to add.

Step 4: Click the box next to the writeup(s) to add. Selected writeups will appear on the right in the "TO BE ADDED TO REPORT" column. Click Add X Writeups.

The selected writeups now appear on the Findings tab of the report.

To add all available writeups (or start with all writeups selected to begin with and then uncheck those not desired), click the box next to "Writeups" in the table header below the search bar.

If the repository is not an "Open" type repository, admins have the option of managing users by clicking Users & Permissions.

Adding Users

Step 1: From the Repositories tab of the WriteupsDB home page, click the card of the repository to modify.

Step 2: Click Users & Permissions.

Step 3: Click Add User.

Step 4: Type in the user from the pulldown menu and select the permission. Repeat as necessary. Click Add X Users.

Step 5: Edit the permission or delete a user, if needed. Click Done.

Modifying Users

Step 1: From the WriteupsDB home page, select the desired repository card and click Users & Permissions.

Step 2: Select the user to modify and change permissions from the pulldown menu.

Step 3: When finished, click Done.

Deleting Users

Step 1: From the WriteupsDB home page, select the desired repository card and click Users & Permissions.

Step 2: Select the user to remove and click the X in that row.

Step 3: When finished, click Done.

WriteupsDB serves as a central repository for all the writeups available in PlexTrac. Its purpose is to categorize, associate them with specific use cases, and facilitate reuse. By structuring and refining the findings, writeups can be seamlessly incorporated into other deliverables, such as a report.

Users access by clicking Content Library in the application's main menu and then clicking WriteupsDB.

Overview

WriteupsDB serves as a valuable tool for tracking and organizing vulnerability information. Benefits of WriteupsDB include:

• Enhanced Organization and Access: WriteupsDB provides a centralized database where items can be added or imported, making it effortless to organize and access information related to vulnerabilities. This centralized approach improves efficiency and streamlines tracking and documenting vulnerabilities.

• Improved Permissions and Segregation: With the introduction of repositories, PlexTrac offers improved permissions and segregation capabilities. Instead of managing writeups as a list, users can create repositories to categorize and segregate writeups based on different contexts, such as incident response or vulnerability management. This feature ensures that the right users have the appropriate level of access in their specific domains and can work without interference from unrelated teams.

• Standardization and Collaboration: WriteupsDB enables the standardization of vulnerability documentation by encouraging and reusing templates. This ensures consistency in the format and language, making it easier for stakeholders to understand and analyze vulnerabilities. The platform also supports collaboration, allowing multiple users to work on writeups simultaneously and facilitating peer reviews for improved quality and accuracy.

The process of creating a writeup is similar to that of creating a finding.

Step 1: From the WriteupsDB home page, click the Writeups tab.

Step 2: Click New Writeup.

Step 3: A modal will appear with the option to start from default finding fields or use a custom findings layout. Choose an option and click Start.

Step 4: Enter the information in the provided fields on the "Create New Writeup" page. Required fields are denoted with a red asterisk.

New sections for the writeup can be added by clicking Add Field at the bottom of the page. There is no limit to the number of new sections. Any section can be deleted by clicking the Remove button.

Step 5: Scroll back to the top of the page and click Close. All changes are autosaved.

PlexTrac provides a downloadable CSV file that can be used as a template for entering writeups offline and importing later into WriteupsDB.

Downloading CSV Template

Step 1: From the WriteupsDB module, click the Writeups tab.

Step 2: Click Import Writeups.

Step 3: Click Download CSV template file.

The file will be downloaded locally for editing.

Writeups CSV Field Mappings

When importing the CSV file, all fields below must appear as column headers and follow the rules defined in the table. Otherwise, the file may be rejected when imported or require further manual editing within PlexTrac.

Importing CSV Template

Step 1: From the WriteupsDB module, click the Writeups tab.

Step 2: Click Import Writeups.

Step 3: Drag the file into the designated box or navigate to the file on the computer.

Step 4: Click Upload.

When completed, the imported writeups will be displayed within the selected repository.

Step 1: From the WriteupsDB module home page, click New Repository.

Step 2: Fill out the provided fields.

1. Repository Name: Describes the repository and is displayed on the repository card from the Repositories tab.

4. Repository Access: Defines what users and roles can access the writeups in this repository.

Step 3: Click Create.

A notification will appear confirming the action, and the repository will appear as a card on the Repositories tab.