Filtering the inspector

cadets / cadets-ui

Web-based user interface to CADETS/OPUS

Apache License 2.0

0 stars 0 forks source link

Open trombonehero opened 7 years ago

trombonehero commented 7 years ago

It would be nice to be able to filter out nodes from the inspector view than an analyst deems uninteresting. Examples include:

[x] whitelisting/blacklisting some node types (e.g., "just show me processes")
[ ] edges that only come from unlink(2) (and the file-version nodes attached to them)
[ ] whitelisted file-version paths (e.g., libraries that we're confident in the provenance of)

trombonehero commented 6 years ago

We can move this back to the "requires thought" column, as it's a feature to revisit in the future (perhaps after PVMv2 lands?).