{Enhancement} HTML toggles for false positives about emba HOT 3 CLOSED

Thanks for your feedback. We will evaluate Kina. The idea is great.

from emba.

As EMBA will not address this and the right area for this is EMBArk I will move this issue. See e-m-b-a/embark#21

from emba.

Does it makes sense to load a CVE blacklist file from the config directory?

The idea is that you can for example place multiple CVE lists in the config directory and create a scan profile per cve list. This give you the possibility to collect the kernel CVEs into a file and ignore it in the future. Another possibility would be to generate CVE lists for Metasploit exploits and so you can generate a scan profile for Metasploit exploits and so on.

As an initial implementation I will include a blacklist that will get checked for CVEs and the included CVEs are ignored from further processing.

from emba.