Updated SCO columns.

Updated Other Occurrences content viewer.
This commit is contained in:
Ann Priestman 2019-06-27 09:24:35 -04:00
parent a8658115f5
commit 38e4f0b6d2
5 changed files with 5 additions and 6 deletions

View File

@ -161,14 +161,13 @@ properties from the central repository. If the selected file or artifact is asso
to one or more properties in the database, the associated properties will be displayed. Note: the Content to one or more properties in the database, the associated properties will be displayed. Note: the Content
Viewer will display ALL associated properties available in the database. It ignores the user's enabled/disabled Correlation Properties. Viewer will display ALL associated properties available in the database. It ignores the user's enabled/disabled Correlation Properties.
The other occurrences are grouped by case and then data source. The rows in the content viewer have background colors to indicate if they are known to be of interest. Properties that are notable The other occurrences are grouped by case and then data source. Selecting one of the results brings up information on it in the right column. If a file or artifact was previously marked as notable, you will see "notable" in red next to "Known Status".
will have a Red background, all others will have a White background. The notable status will also be displayed in the "Known" column.
\image html central_repo_content_viewer.png \image html central_repo_content_viewer.png
The user can click on any column heading to sort by the values in that column. The user can click on any column heading to sort by the values in that column.
If the user selects a row and then right-clicks, a menu will be displayed. If the user selects an entry in the third column and then right-clicks, a menu will be displayed.
This menu has several options. This menu has several options.
-# Select All -# Select All
-# Export Selected Rows to CSV -# Export Selected Rows to CSV

Binary file not shown.

Before

Width:  |  Height:  |  Size: 19 KiB

After

Width:  |  Height:  |  Size: 24 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 63 KiB

After

Width:  |  Height:  |  Size: 63 KiB

View File

@ -29,7 +29,7 @@ These columns display the following information:
<li> (O)ther occurrences column - indicates how many data sources in the Central Repository contain this item. The count will include the selected item. <li> (O)ther occurrences column - indicates how many data sources in the Central Repository contain this item. The count will include the selected item.
</ul> </ul>
To display more information about why an icon has appeared, you can hover over it. The Comment and Other occurrences columns query the Central Repository. If this seems to be having a performance impact, it can be disabled through the \ref view_options_page. This will remove the Other occurrences column entirely and the Comment column will be based only on tags. To display more information about why an icon has appeared, you can hover over it. These columns query the Central Repository as well as the case database. If this seems to be having a performance impact, you can disable them through the \ref view_options_page. This will remove the Other occurrences column entirely, the Comment column will be based only on tags, and the Score column will no longer be able to reflect Notable items.
\subsection export_csv Exporting to CSV \subsection export_csv Exporting to CSV

View File

@ -35,9 +35,9 @@ Similarly, the option to hide slack in the views area will prevent slack files f
This option allows you to hide tags from other users in the Tagging section of the tree. See \ref user_tags for more details. This option allows you to hide tags from other users in the Tagging section of the tree. See \ref user_tags for more details.
\subsection view_options_cr_columns Do not use the Central Repository to populate columns \subsection view_options_cr_columns Do not add columns for S(core), C(omments) and (O)ccurrences
By default, the first three columns in the result viewer after the file name in the results viewer are named "S", "C" and "O". These are described in more detail on the \ref result_viewer_page page. The Comment and Other occurrences columns query the Central Repository. If this seems to be having a performance impact, it can be disabled using the checkbox. This will remove the Other occurrences column entirely and the Comment column will be based only on tags. By default, the first three columns in the result viewer after the file name in the results viewer are named "S", "C" and "O". Populating these columns can increase loading times. See the \ref result_viewer_sco section for additional information.
\subsection view_options_paging Paging \subsection view_options_paging Paging