nl-kat-coordination icon indicating copy to clipboard operation
nl-kat-coordination copied to clipboard

[EPIC] Improve Aggregate Report

Open madelondohmen opened this issue 1 year ago • 0 comments

Description

The latest version still needs some improvements. To do this, create a new branch and create a PR. Please update the list below and check the boxes if an improvement is completed.

Improvements on Interface

Table of content

  • [x] Vulnerabilities: make styling of IP addresses/hostnames prettier (address/hostnames only)
  • [ ] Vulnerabilities: add "New" tag to new IPs
  • [ ] Basic Security: add status tag (C/M/S) to sub-items

Summary

  • [ ] Extend summary

Recommendations

  • [ ] Retrieve data from recommendations in a different way

Asset overview

  • [ ] Add "New" tag to new IPs

Basic security

General
  • [x] Mail, Web, DNS, Other -> add "server" to the titles (like in Figma)
  • [ ] Compliancy issues: Icons are always "icon negative" -> It should depend on the risk level
  • [ ] Compliancy issues: Add unfolding for findings
  • [ ] Checks: Add hyperlinks
  • [ ] Add subtitle with status tag (Critical/Medium/Secure, Score: 100%, Sector: 90%)
Overview
  • [x] Add hyperlinks to the table
  • [ ] Add tooltips to the table
System specific
  • [ ] Web: Ensure that all checks that aren't compliant are displayed in the Compliance Issue table

Vulnerabilities

  • [ ] Hostnames are not displayed
  • [x] Every system is displayed, even if there are no vulnerabilities -> Exclude those

Appendix

  • [ ] Add content

Other

  • [x] Improve PDF

Improvements on Backend

Data Collection

  • [ ] We should think about enforcing the type of output objects for the reports or just do queries in the aggregate reports, because the aggregation logic has become a mess.
  • [ ] If we are not going to do queries in the aggregate report, we should optimize by not running the same reports on multiple items in the same system that collect the same finding types.

madelondohmen avatar Dec 20 '23 13:12 madelondohmen