search

OWASP-Benchmark / BenchmarkUtils

OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.
https://owasp.org/www-project-benchmark/
GNU General Public License v3.0
15 stars 49 forks source link

Feature/include datadog log parser #30

Closed anderruiz closed 1 year ago

anderruiz commented 2 years ago

What does it do?

It includes a new parser to be able to get information for the new Datadog vulnerability detection

davewichers commented 2 years ago

@anderruiz - can you point me to the web page for this tool?

anderruiz commented 2 years ago

Datadog platform is available here:

https://www.datadoghq.com/

It is a commercial solution, and vulnerability detection is not released yet to the public. The engine will be based in Hdiv one which parser I included in the Benchmark project 5 years ago.

darkspirit510 commented 2 years ago

Looks good to me. I can create the scorecard with the testfile without errors. Could you send me a more complex testfile to github@darkspirit510.de? (Of course this one won't be published! 🤫)

anderruiz commented 2 years ago

Sent a more complex log file!

darkspirit510 commented 2 years ago

Thanks, runs without any issues.

@davewichers guess this one can be merged

anderruiz commented 2 years ago

@davewichers Any other comment or thing you want to clarify?

davewichers commented 1 year ago

Hey - sorry for the delay. I was on holiday for 2 weeks then caught Covid :-(. Anyway, is this product publicly available yet. If not, I'd prefer to hold off until it is public to merge it in. Then I'll update the OWASP site to indicate this tool is now supported.

davewichers commented 1 year ago

Any news on when the product at: https://www.datadoghq.com/ is or will be released? And they have a lot of products, so what is the name of this product, or the product that includes this type of scanning?

davewichers commented 1 year ago

@anderruiz - Can you answer my previous question?

anderruiz commented 1 year ago

Sorry for the delay. The product page is this one:

https://www.datadoghq.com/product/application-vulnerability-management/

Do you think we could merge the PR?