Files on DefectDojo Documentation

2ms (too many secrets)

Mon, 01 Jan 0001 00:00:00 +0000

Import 2ms reports in JSON format. 2ms scans repositories, filesystems and collaboration platforms such as Confluence, Discord, Slack and Paligo for exposed secrets.

42Crunch

Mon, 01 Jan 0001 00:00:00 +0000

Import a 42Crunch Security Audit or Conformance Scan report.

This exists for organisations that cannot grant 42Crunch API credentials — air-gapped networks, procurement restrictions, a pending security review. The DefectDojo Pro 42Crunch connector pulls the same data over the API; this parser accepts the same data as a file.

AccuKnox

Mon, 01 Jan 0001 00:00:00 +0000

Import an AccuKnox findings export.

This exists for organisations that cannot grant AccuKnox API credentials — air-gapped networks, procurement restrictions, a pending security review. The DefectDojo Pro AccuKnox connector pulls the same data over the API; this parser accepts the same data as a file.

Action1

Mon, 01 Jan 0001 00:00:00 +0000

Import an Action1 vulnerability export.

This exists for organisations that cannot grant Action1 API credentials — air-gapped networks, procurement restrictions, a pending security review. The DefectDojo Pro Action1 connector pulls the same data over the API; this parser accepts the same data as a file.

Acunetix Scanner

Mon, 01 Jan 0001 00:00:00 +0000

This parser imports the Acunetix Scanner with xml output or Acunetix 360 Scanner with JSON output.

Sample Scan Data

Sample Acunetix Scanner scans can be found here.

AIDE

Mon, 01 Jan 0001 00:00:00 +0000

AIDE (Advanced Intrusion Detection Environment) is a file integrity monitor. It records a baseline of the filesystem — permissions, ownership, size, timestamps, checksums — and a later --check reports every path that has since been added, removed or changed.

Akto

Mon, 01 Jan 0001 00:00:00 +0000

Import an Akto API-security export.

This exists for organisations that cannot grant Akto API credentials — air-gapped networks, procurement restrictions, a pending security review. The DefectDojo Pro Akto connector pulls the same data over the API; this parser accepts the same data as a file.

Alert Logic

Mon, 01 Jan 0001 00:00:00 +0000

The Alert Logic parser for DefectDojo supports imports from CSV format. This document details the parsing of Alert Logic vulnerability scan exports into DefectDojo field mappings, unmapped fields, and transformation notes for easier troubleshooting and analysis.

Anchore Enterprise Policy Check

Mon, 01 Jan 0001 00:00:00 +0000

Anchore-CLI JSON policy check report format.

Sample Scan Data

Sample Anchore Enterprise Policy Check scans can be found here.

Default Deduplication Hashcode Fields

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

Anchore Enterprise Vulnerability

Mon, 01 Jan 0001 00:00:00 +0000

File Types

DefectDojo parser accepts a .json file.

You can generate vulnerability data using the Anchore Enterprise CLI tool, Anchorectl, or through the Enterprise UI.