microsoft / AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
MIT License
2.68k stars 271 forks source link

Track Exceptions when Gathering Info #699

Open gfs opened 10 months ago

gfs commented 10 months ago

Is your feature request related to a problem? Please describe. Some rules depend on boolean values (like Signature checking) but it may be possible for the data gathering to fail for one reason or another - the default value will then trigger the analysis rule, which may or may not be correct as the data is not gathered. Per #696.

Describe the solution you'd like Ideally, we would retain information about exceptions that were encountered and modify rules to account for that the data was actually gathered as an additional clause in the rules for these fields, or perhaps gather these data points as nullable ro allow for cases where data collection failed to distinguish between true detections of, for example, missing signatures, vs exceptions which prevented data from being gathered.