Vulnerability Profile by application

[itstrap]

Hello,

My name is Jazmin, and I want to know if there's a way to create a Vulnerability Profile based on application or technology? I mean if you could select the vulnerabilities group by application, ie. "mysql" and automatically display all the associated vulnerabilities. Or I don´t know if it could be a way to create a filter by the ID of the Threat.

Best Regards,

Jazmin Ortiz

[rmonvon]

Hi Jazmin...You can match 'mysql' under the Threat Name and that will filter on any threat where the text is found in the vuln name.  Under Threat Name, you will find its usage - Used to match any signature containing the entered text as part of the signature name.  Thanks.

[zarina]

You can goto the vulnerability profile and to the exceptions tab: click on 'show all signatures' and search for the keyword

[itstrap]

Thank you to both, but in this case that profile won´t be updated  automatically when a new version of Threat database appears, right?

Regards,

Jazmin Ortiz

[rmonvon]

If we use the filter in the Threat Name, then any new threat signs containing the text will also match.  Existing threat signs will be updated and apply accordingly.

The exception list will remain static and not change after updates.  Thanks.