Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DFIQ Analyzer Framework - Frontend Implementation and Enhancements #3198

Open
5 tasks
jkppr opened this issue Oct 7, 2024 · 0 comments
Open
5 tasks

DFIQ Analyzer Framework - Frontend Implementation and Enhancements #3198

jkppr opened this issue Oct 7, 2024 · 0 comments
Assignees

Comments

@jkppr
Copy link
Collaborator

jkppr commented Oct 7, 2024

This issue tracks the remaining work for the DFIQ Analyzer framework, following the backend implementation in PR #3178. That PR introduced the core framework for executing analyzers based on investigative approaches defined in DFIQ objects.

Next Steps:

  • Testing:
    • Add unit tests for the dfiq_plugin/manager.py (e.g., test analyzer loading, execution, error handling).
    • Add unit tests for the tasks.py additions (e.g., test DFIQ analyzer task creation and execution).
  • Analyzer Development:
    • Add one basic DFIQ analyzer to showcase the feature (e.g., an analyzer that checks for specific events related to a common attack technique). This will serve as an example for developers and users.
  • Documentation:
    • Update documentation on how to build and use DFIQ analyzers. Include guidelines on analyzer structure, registration, and DFIQ approach mapping.
  • Frontend Integration:
    • Add the analyzer status and verdicts to the frontend of the DFIQ card. This will allow users to easily monitor the progress and results of DFIQ-triggered analyses.
@jkppr jkppr added the Analyzers label Oct 7, 2024
@jkppr jkppr self-assigned this Oct 7, 2024
@jkppr jkppr mentioned this issue Oct 7, 2024
7 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant