Findings: Finding Details Sheet

The Finding Details sheet is accessible from the Findings page [ Vendor Risk ➔ Findings]. It includes details from the table and additional details about findings specific to each risk vector.

To open the Finding Details sheet, select a finding in the table.

Details Tab

The Details tab in the Finding Details sheet may contain the following sections and information:

• An overview of common fields:
  • [Date] First Seen = The date when this finding was first observed.
  • [Date] Last Seen = The date when this finding was last observed.
  • Finding Grade = The current grade assigned to this finding.
  • Finding Identifier = The asset (e.g., IP, domain, host, application, port) and its status (e.g. online/offline, version, support status) that identifies the finding.
  • Impacts Risk Vector Grade = Indicates if the finding impacts the risk vector grade.
  • Lifetime = Every finding has a lifetime that indicates how long it impacts the risk vector grade, depending on the particular risk vector. This is defined by the number of days a finding will impact the risk vector grade.
  • Rolled Up ID = A stable and randomized identifier for findings. It is assigned to a finding when one or more observations with largely similar key properties occur in close succession.
• Details: Details about the finding.
• Remediations: Finding details and remediation tips.
• Assets: Asset details. See how assets are attributed to findings.
• Comments: Finding comments.
•  

Risk Vector Specific Details

The details in the sheet vary depending on the risk vector. See details for:

• Compromised Systems Findings
  • Botnet Infections
  • Spam Propagation
  • Malware Servers
  • Unsolicited Communications
  • Potentially Exploited
• Diligence
  • SPF Domains
  • DKIM Records
  • TLS/SSL Certificates
  • TLS/SSL Configurations
  • Open Ports
  • Web Application Headers
  • Patching Cadence
  • Insecure Systems
  • Server Software
  • Desktop Software
  • Mobile Software
  • DNSSEC
  • Mobile Application Security
  • Web Application Security
  • Domain Squatting
• File Sharing (User Behavior Forensics)
• Public Disclosures