Domains
When the Domain asset type is chosen, the various domains that were scanned load beside the asset type column.
The following details are included as an overview for each domain:
- Domain name
- Risk score
- Severity of its risks
- First and latest instance of occurrence
Clicking on the redirect arrow at the right-hand bottom of each domain directs the user to a new page where more details and findings regarding that specific domain are shown. This page is comprised of three sections:
- Overview
- Technologies
- Findings
Overview
This section is made up of the following blocks:
- Risk Score chart & Details
- Discovery Path
- Lookalike Domains
Risk score chart & Details
The risk score chart presents a numerical value, ‘risk score’. This score refers to how high of a risk the exposure of this asset provides. The higher the score the higher the risk (the area of the shaded region in the risk score chart is directly proportional to its value).
The following details about the domain and the risks it possesses are displayed adjacent to the risk score chart:
- Domain Name
- Probability of the risk occurring
- First instance of occurrence
- Latest instance of occurrence
Discovery Path
As the name suggests, this block traces the route/path traversed to reach this domain.
Lookalike Domains
This block keeps track of the list of domain names that are similar to the chosen domain. The total number of domains listed is provided at the bottom of the list. It also denotes their operational status based on the following colour code:
- Green: Active
- Red: Inactive
Technologies
This section displays a table which records the following details regarding the technologies employed in this domain:
- Name
- Version
- Category
- Host
A list of the technologies can be downloaded as a .csv file by clicking on the download button at the top right corner and then pressing the ‘export as .csv’ option. The total number of technologies discovered is provided at the bottom of the list.
Findings
This tab mainly records the findings which have been derived based on scans conducted for this domain. For each finding the following elements are displayed:
- Title (Attack name/ CVE based)
- Description of the finding
- Probability of risk occurrence
- List of applicable assets
- Severity of the Risk
- Remediation
Clicking on a particular finding exposes a more detailed view of it. Clickable links are attached in the remediation part of the enlarged version for each finding.
This list of findings can be downloaded as a .csv file by clicking on the download button at the top right corner and then pressing the ‘export as .csv’ option. The total number of findings uncovered is provided at the bottom of the list.