AppSec Troubleshooting Map

[stefanie_pachne]

Getting started

• University course
• Application security overview
• FAQs
• Get started with vulnerability analytics
• Get started with application protection

Product concepts

• Vulnerability status
• Vulnerability sources
• Affected and related entities
• Risk assessment
• Davis security score
• Davis security advisor

Troubleshooting

• Monitoring
  • Application Security pages are unavailable
  • Vulnerabilities aren't displayed
  • Low host coverage 
  • OneAgent auto injection in Infrastructure Monitoring mode is disabled
  • Monitoring stopped error on Application Security pages
  • Radar stopped on DevSecOps Lifecycle Coverage with Snyk app
  • The vulnerability feed import isn't working
• Vulnerabilities
• Details 
  • Public internet exposure and reachable data assets are 'Not available'
  • No information about the database affected by an attack
  • Different values on the Third party vulnerabilities and vulnerability details pages
• Detection
  • False positive results for vulnerabilities > Reported vulnerability is considered as a false positive
•  States
  • Vulnerability keeps being resolved and reopened
  • All vulnerabilities are closed set to Resolved

Product usage

• Runtime Vulnerability Analytics
  • Prioritize vulnerabilities
  • Manage remediation
  • Share insights
  • Collaborate with other apps 
  • Third party vulnerabilities
    • Manage third party vulnerabilities
    • Filter third party vulnerabilities
    • Davis security advisor
    • Davis security score
    • Remediation tracking
    • Define monitoring rules
  • Code level vulnerabilities
    • Manage code level vulnerabilities
    • Define monitoring rules
    • Filter vulnerabilities
• Runtime Application Protection
  • Manage attacks
  • Monitoring rules
  • Notifications
  • Metrics
• Grail
  • Visualize and analyze security findings > Container findings 
  • Ingest and process custom security findings  
  • Automate  security findings
  • Discover scan coverage gaps
  • Security reporting
  • Threat hunting and forensics > Security investigator > Instant intrusion response 
  • Security data on grail > Security data DQL examples