-
Notifications
You must be signed in to change notification settings - Fork 25
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #518 from cobalthq/chore/FX-4539/scan-controls-and…
…-progress-tracker chore/FX 4539/scan controls and progress tracker
- Loading branch information
Showing
14 changed files
with
106 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -55,6 +55,8 @@ See more about how to configure a target in [configuring a target] | |
|
||
{{% image src="/deepdive/scans/11_ScheduledScansView.png" alt="Scheduled Scans View - Targets" %}} | ||
|
||
Information about scan statuses, transitions, and progress tracking can be found [here]. | ||
|
||
### Scan Results | ||
|
||
- Once a scan is complete, you have two options to View Results | ||
|
@@ -175,3 +177,4 @@ For support, please reach out to your CSM or email us at [email protected]. | |
|
||
[Report types]: #report-types | ||
[configuring a target]: /platform-deep-dive/scans/targets#adding-a-web-or-api-target | ||
[here]: /platform-deep-dive/scans/scans |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,101 @@ | ||
--- | ||
title: "Scans" | ||
linkTitle: "Scans" | ||
weight: 15 | ||
description: > | ||
A scan represents a test run against a specific target | ||
--- | ||
<style> | ||
.image-box.borderless-image { | ||
border: none; | ||
border-radius: 0; | ||
box-shadow: none; | ||
margin: 0 0 20px 0; | ||
} | ||
.width400 { | ||
width: 400px; | ||
} | ||
.ml25 { | ||
margin-left: 25px !important; | ||
} | ||
.mx0 { | ||
margin-left: 0px !important; | ||
margin-right: 0px !important; | ||
} | ||
.mt0 { | ||
margin-top: 0px !important; | ||
} | ||
.mb0 { | ||
margin-bottom: 0px !important; | ||
} | ||
</style> | ||
|
||
## Statuses | ||
|
||
A scan can have the following states: | ||
|
||
{{% image src="/deepdive/scans/scans/ScanStatuses.png" alt="scan statuses" class="mt0" %}} | ||
|
||
To start a scan, you can either **start** it immediately or **schedule** it for a later point in time. This can even be on a [recurring basis]. | ||
|
||
{{% image src="/deepdive/scans/scans/StartScan.png" alt="start scan button" class="borderless-image mb0" %}} | ||
|
||
Initially, a scan will get **queued** while the scanner is waiting for resource allocation. Once the scan has the required resources, it will show up as **Running**. | ||
|
||
{{% image src="/deepdive/scans/scans/PauseScan.png" alt="pause scan button" class="borderless-image mb0" %}} | ||
|
||
A running scan can either be **paused** or **canceled**. Canceling a scan will finish all of its sub-processes and won't allow the scan to be restarted again. | ||
|
||
{{% image src="/deepdive/scans/scans/ResumeScan.png" alt="resume scan button" class="borderless-image mb0" %}} | ||
|
||
If you want to still have the option to **resume** a scan later on, use the pausing functionality. Once paused, a scan will stay in this state for up to 7 days, after which it will get canceled automatically. A paused scan can also be canceled directly, if needed. | ||
|
||
Once the scan is finished, it will either move to a **completed** or **failed** state. A completed scan represents a successful test run. On the other hand, a failed scan signals that there's been a problem during the test execution. To find out exactly what went wrong, you can review the progress tracker on the scan's details page. | ||
|
||
If some vulnerabilities need to be manually confirmed, the scan will show as **Under Review**. After this manual review, the scan changes to **Completed**. | ||
|
||
## Components | ||
|
||
{{% image src="/deepdive/scans/scans/PausedComponents.png" alt="paused scan components" class="mx0 mt0" %}} | ||
|
||
A scan is subdivided into 3 components that partially overlap each other: | ||
1. Fingerprinting: Identifies the technologies used on the target. Examples: React or Cloudflare. | ||
2. Crawling: Goes through the target's URLs and interacts with every element found, clicking on buttons and filling in forms, among other things. | ||
3. Scanning: Finds vulnerabilities within the target's URLs. | ||
|
||
Each of these components reports its own progress in terms of either an absolute count (number of technologies found during fingerprinting) or percentages (percentage of URLs crawled or scanned). | ||
If any issues arise as part of a component's activity, these will show up as warning or error messages below the corresponding progress bar. | ||
|
||
### Progress bars | ||
|
||
Each component will have its own progress bar to provide quick visual feedback. | ||
Aside from the bars filling up as each component progresses, the color of the bar may change as well to reflect its state: | ||
|
||
{{% image src="/deepdive/scans/scans/LightGreyProgressBar.png" alt="light grey progress bar" class="borderless-image width400 ml25" %}} | ||
|
||
- Light grey: The specific component hasn't started yet or the whole scan is paused. | ||
|
||
{{% image src="/deepdive/scans/scans/BlueProgressBar.png" alt="blue progress bar" class="borderless-image width400 ml25" %}} | ||
|
||
- Blue: The component has started and is making progress. | ||
|
||
{{% image src="/deepdive/scans/scans/GreenProgressBar.png" alt="green progress bar" class="borderless-image width400 ml25" %}} | ||
|
||
- Green: The component has successfully completed its duty. | ||
|
||
{{% image src="/deepdive/scans/scans/RedProgressBar.png" alt="red progress bar" class="borderless-image width400 ml25" %}} | ||
|
||
- Red: The component failed. Whenever this occurs, details will show below the progress bar. | ||
|
||
{{% image src="/deepdive/scans/scans/YellowProgressBar.png" alt="yellow progress bar" class="borderless-image width400 ml25" %}} | ||
|
||
- Yellow: The component didn't fail but there's potential for improvement, since it didn't run optimally. Details will show below the progress bar. | ||
|
||
{{% image src="/deepdive/scans/scans/DarkGreyProgressBar.png" alt="dark grey progress bar" class="borderless-image width400 ml25" %}} | ||
|
||
- Dark grey: The whole scan has been canceled. | ||
|
||
|
||
<!-- links --> | ||
|
||
[recurring basis]: /platform-deep-dive/scans/#scan-scheduling |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.