Pentest Finding Data Model
The Pentest Finding data model represents a security finding discovered through a penetration test. It extends the Finding data model.
The following table details the default attributes of the Pentest Finding data model:
Order | Attribute Name | Attribute Type | Relationship Type | Required |
---|---|---|---|---|
1 | displayName | Calculated (Text) | N/A | Yes |
2 | type | Reference (Pentest finding definition) | IS | No |
3 | baseRiskScore | Calculated (Number) | N/A | No |
4 | riskFactorOffset | Calculated (Number) | N/A | No |
5 | riskScore | Calculated (Number) | N/A | No |
6 | riskRating | Calculated (Singe Choice) | N/A | No |
7 | ageInDays | Calculated (Number) | N/A | No |
8 | sla | Calculated (Number) | N/A | No |
9 | slaLevel | Calculated (Text) | N/A | No |
10 | dueDate | Calculated (Date Time) | N/A | No |
11 | complianceStatus | Calculated (Singe Choice) | N/A | No |
12 | daysToFix | Calculated (Number) | N/A | No |
13 | confidence | Single Choice | N/A | No |
14 | summary | Text | N/A | No |
15 | description | Text | N/A | No |
16 | assessment | Reference (Assessment) | DISCOVERED_IN | No |
17 | severity | Single Choice | N/A | No |
18 | status | Status | N/A | No |
19 | results | Text | N/A | No |
20 | statusCategory | Singe Choice | N/A | No |
21 | targets | Reference (Asset) | HAS | No |
22 | remediationSLA | Number | N/A | No |
23 | firstFound | Date Time | N/A | No |
24 | lastFound | Date Time | N/A | No |
25 | lastFixed | Date Time | N/A | No |
26 | extendedDueDate | Date Time | N/A | No |
27 | riskOwner | Category | N/A | No |
28 | remediationOwner | Category | N/A | No |
29 | riskScoringModel | Risk Scoring Model | N/A | No |
30 | riskFactors | Risk Factors | N/A | No |
31 | slaDefinition | SLA | N/A | No |
32 | uid | Text | N/A | Yes |
33 | dataModelName | Calculated (Text) | N/A | No |
34 | sourceUids | Text (Multivalued) | N/A | No |
35 | connectorCategories | Text (Multivalued) | N/A | No |
36 | connectorNames | Text (Multivalued) | N/A | No |
37 | dataIntegrationTitles | Text (Multivalued) | N/A | No |
38 | sourcesIcons | Source data models icons | N/A | No |
39 | name | Text | N/A | No |
40 | categories | Text (Multivalued) | N/A | No |
41 | flowState | Text | N/A | No |
42 | sources | Reference (Base model) | SOURCED_FROM | No |
43 | dateCreated | Date Time | N/A | No |
44 | lastUpdated | Date Time | N/A | No |
45 | createdBy | Text | N/A | No |
46 | updatedBy | Text | N/A | No |
FOOTNOTES
- The Order column specifies the order of attributes being calculated in data computation.
- The attribute names are used in Brinqa Query Language (BQL) queries and Brinqa Condition Language (BCL) predicates.
- In the Type column, Calculated means that the value of the attribute is computed by executing a script. The text in the parentheses after Calculated denotes the type of the outcome.
- In the Type column, Reference means that two data models are related. The name in the parentheses after Reference indicates the other data model.
- The Relationship Type column only applies to the Reference type attributes. You can use the relationship type keyword in BQL queries.