ThreatKB icon indicating copy to clipboard operation
ThreatKB copied to clipboard

files testing degradation tracking

Open vantagepointsecurity-danny opened this issue 2 years ago • 0 comments

Attach everything. You know which files have signature hits from whenever a test was last run.

Only show the files that have a hit by default. Have a button to expand the rest.

If we want to really do this right. We should show existing DFI file hits as well as previous, but ghosted out.

If someone runs a test and sees a file they expect to fire, go grey (ghosted), they will see it and can adjust accordingly.

In a nut shell: Save all files Hide files which never had a signature hit Ghost/grey files that used to have a signature hit but don't now Show files that have active signatures I think you worry about API only for this, if the UI is easy enough. Implement that too.