search

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.35k stars 159 forks source link

Filtering on Outcome Alerted #221

Open tamenzel opened 1 year ago

tamenzel commented 1 year ago

Describe the bug If you go into a campaign and would like to filter on the outcome of alerted, you have 2 "Alerted" options where one works and one doesn't. Filtering on "Blocked" does not show blocked outcomes.

To Reproduce Steps to reproduce the behavior:

  1. Go to any campaign that has alerted as an outcome as well as blocked and alerted as an outcome.
  2. Click on the selection box under the Outcome column and select the first "Alerted" in the column. All your alerted and Blocked & alerted outcomes will show.
  3. Click on the selection box under the Outcome column and select the second "Alerted" in the column. No alerted outcomes will appear
  4. Click on the selection box under the Outcome column and select the "Blocked" in the column. No blocked outcomes will appear.

Expected behavior It is expected that if you select "Blocked" outcomes that all the tests that were blocked would appear. We expected that outcomes that were only alerted on and not blocked would appear if we selected the first "Alerted" and that the outcomes that were blocked and Alerted would be shown if we selected the second "Alerted"

Screenshots image image image image

Desktop (please complete the following information):

Additional context Some outcomes are marked as Blocked and Alerted, some as blocked only, and some outcomes are marked as Alerted

SRAPSpencer commented 1 year ago

Thanks for the report. This is in our internal tracking and will be addressed.