Project settings¶
The project settings control the name of a project, its scan behaviour, its monitoring interval, and who may access it.
Open the settings using the gear symbol in the project header, or the gear symbol in the Actions column of the projects overview. The page is titled <Project name> · Project settings and offers the tabs General, Options, Monitoring, Access and Mass Manipulation.
General¶
| Field | Description |
|---|---|
| Project name | The name of the project. Mandatory. |
Select Save to apply a change, or Delete project to remove the project and all of its results permanently.
Options¶
The Options tab controls how the scan behaves. The settings correspond to the options offered when the project is created, and may be changed at any time; they take effect with the next analysis.
| Option | Effect |
|---|---|
| Keyword search in HTTP body | Enables full-text search in the body of HTTP scans. HTTP protocol scans contain the first 32 KB of the web root / as the HTTP body. This may lead to many results and may increase false positives. |
| Add keyword search results to assets** | The results of each keyword search are added directly to the assets of the project rather than being staged in the discovery area first. This may lead to a large number of false positives. |
| **Subdomain enumeration from domains only | If a subdomain list is provided, only the domain is used for subdomain enumeration. Otherwise each subdomain is treated as a domain and is itself used for subdomain enumeration. |
| Use external active subdomain enumeration | Enables active DNS subdomain enumeration using predefined wordlists. |
| Use external passive subdomain enumeration | Enables passive DNS subdomain enumeration by querying external databases. |
| Take screenshots of HTTP(S) services | Creates a screenshot of each identified HTTP(S) scan result. |
| Enable domain squatting on domains | Lists similar domains that are in use and may attempt to impersonate the original domain. The results appear on the Domain squatting sub-tab of Intel. |
| E-mail security checks | Checks TLS, SPF, DMARC, DKIM, MTA-STS, DANE, and DNSSEC for the mail domains of the project. The results appear on the E-mail security sub-tab of Assets. Available in Active mode only. |
| Enable transliterations on keywords | Adds transliterated variants for every word containing umlauts. For Schöffer, the variants Schoeffer and Schoffer are added. |
Select Save to apply the selection.
Presets
Where a particular combination of options is used repeatedly, define it once as a preset on the Presets tab of Companies. Presets can then be selected directly in the project creation dialogue.
Monitoring¶
Monitoring re-analyses the existing scope at a fixed interval and reports the changes by email.
| Setting | Effect |
|---|---|
| Daily | The scope is re-analysed once per day. |
| Weekly | The scope is re-analysed once per week. |
| Monthly | The scope is re-analysed once per month. |
| Inactive | No recurring analysis takes place. Existing results are retained. |
- Select the required interval.
- Enter the Email address that is to receive the monitoring updates for this project.
- Select Save.
The selected interval is reflected in the Monitoring column of the projects overview. Monitoring consumes the monitoring quota of the company plan; see Companies.
Access¶
The Access tab shows who may open the project.
| Section | Content |
|---|---|
| Company access | The company the project belongs to, and the number of users in that company. Expand the entry to list them. |
| User access | The individual users who have access, each with their role. |
To grant access to a further user, select Add users next to User access and choose the user.
Note
Changing the owner of a project is an administrative function and is performed on the Projects tab of Administration.
Mass manipulation¶
The Mass Manipulation tab manages rules that write project-specific information, such as the company, the sector or a classification, into the custom data of every service that matches a condition. They run after every scan and monitoring run, and can also be applied once on request. See Mass manipulation.