google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.58k stars 589 forks source link

Analyzer sort results by priority #2800

Open jkppr opened 1 year ago

jkppr commented 1 year ago

With PR #2797 we introduce the UI for verbose analyzer output. This output also contains a priority field that can be "NOTE", "LOW", "MEDIUM", "HIGH". Where "NOTE" is the default and also the value for all legacy analyzers.

The analyzer results are currently sorted alphabetically but should be sorted this priority first and then alphabetically. So the goal is: