Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Field name standardization #350

Merged
merged 1 commit into from
Apr 26, 2021

Conversation

tsellers-r7
Copy link
Contributor

Description

This PR adds field names (os.vendor, service.product, etc) to bin/recog_standarize. This should help us identify field name typos as well as be a bit more intentional when we introduce a new field.

How Has This Been Tested?

ruby bin/recog_standardize xml/*.xml, rspec, etc.

Types of changes

  • New feature (non-breaking change which adds functionality)

Checklist:

  • I have updated the documentation accordingly (or changes are not required).
  • I have added tests to cover my changes (or new tests are not required).
  • All new and existing tests passed.


`fields.txt` defines the various fields (`os.vendor`, etc.) used to assert
information about a match.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The above is the only real change to this file. The rest are just formatting.

<param pos="1" name="hw.product.model"/>
<param pos="0" name="hw.product" value="TemPageR {hw.product.model}"/>
<param pos="1" name="hw.model"/>
<param pos="0" name="hw.product" value="TemPageR {hw.model}"/>
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@hdm - RE: These two fingerprints - you added these a while back. I've changed hw.product.model to hw.model to be in keeping with the use of hw.model used elsewhere. Any concerns here?

@@ -2766,7 +2766,7 @@
<param pos="0" name="hw.certainty" value="0.75"/>
<param pos="0" name="os.vendor" value="Dell"/>
<param pos="0" name="os.product" value="iDRAC Linux"/>
<param pos="0" name="os .certainty" value="0.75"/>
<param pos="0" name="os.certainty" value="0.75"/>
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already paying off..

@tsellers-r7
Copy link
Contributor Author

tsellers-r7 commented Apr 26, 2021

@hdm - in light of the ow.device typo you caught earlier I figured it'd be time to implement this to help catch such things.

@hdm
Copy link
Contributor

hdm commented Apr 26, 2021

Nice work!

@tsellers-r7 tsellers-r7 merged commit 5fe4b3d into rapid7:master Apr 26, 2021
@tsellers-r7 tsellers-r7 deleted the standardize_fields branch April 26, 2021 17:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants