Is there a way to merge assessments?

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

1.36k stars 161 forks source link

Is there a way to merge assessments? #94

Open forkrul opened 3 years ago

forkrul commented 3 years ago

Assessments are point in time, and might be a subset of tests executed. Running quarterly ops, it'd be useful to have a "current" view, for defenders to track hunt updates.

How can we merge historical ops, into one, (keeping the old in-time snapshots of assessments) in order to update the status of hunt(s) develop in one place?

carlvonderheid commented 3 years ago

Hi, thanks for reaching out. This functionality currently does not exist. We have a couple sprints to address better assessment and campaign management for completed assessments in early 2021 that will address this.

forkrul commented 3 years ago

Thanks for the feedback.

thebleucheese commented 3 years ago

If you're looking at this from a reporting perspective, the reporting screens have an "Occurrence Filter" in the top right which you can use to only see the latest results. Select multiple assessments that you're reporting on and as long as you're basing your tests on Test Cases that have templates in the admin section, this will use the Template IDs to find and report on only the latest results.

This was released in VECTR earlier this year.