ThreatKB
ThreatKB copied to clipboard
files testing degradation tracking
Attach everything. You know which files have signature hits from whenever a test was last run.
Only show the files that have a hit by default. Have a button to expand the rest.
If we want to really do this right. We should show existing DFI file hits as well as previous, but ghosted out.
If someone runs a test and sees a file they expect to fire, go grey (ghosted), they will see it and can adjust accordingly.
In a nut shell: Save all files Hide files which never had a signature hit Ghost/grey files that used to have a signature hit but don't now Show files that have active signatures I think you worry about API only for this, if the UI is easy enough. Implement that too.