Results
Results are objects used to perform operations against (which may include indexing, security tasks, enrichment of data, etc.). A result simply needs to define the following:
- URL
- Title
- Domain
The attachments section show any files attached to the result and allows triggering screenshot generation (through Sketchy if available) or manually uploading a file. New screenshots can be uploaded by rolling over the large "+" placeholder and clicking "Upload". A screenshot can be requested from Sketchy by rolling over the large "+" placeholder and clicking "Generate"
Rolling over an existing screenshot will provide options to "View" the result full size or "Delete" the screenshot.
At the bottom of the result page is the comments section. Comments can be added using the comment form at the top, or existing comments can be replied to by hitting the "Reply" button under the comment. The small -/+ to the left of the commenter's name allows collapsing/expanding the comment thread.
On the right side of the page, the result's assignee can be viewed/set. To change the assignee click the pencil icon and select a new user.
Note: a user must exist on the system to be used as an assignee.
If Scumblr is configured to send email messages, it is possible to subscribe to a result to receive an email when updates occur. To do this, click the "Subscribe" link. Once subscribed you can unsubscribe by clicking "Unsubscribe".
The number to the right of the "Subscribe/Unsubscribe" link indicates how many users are currently subscribed. Clicking this number will show a list of subscribed users and allow adding a new subscriber (including someone besides yourself) or removing existing subscribers.
If the result has had tags applied, they will appear in the tags section. Tags can be removed by clicking the "X" inside the tag. New tags can be added by clicking the "+" and typing/selecting the tag you'd like to apply.
The workflow flags section of the page shows any workflows that have been added to the result. Results can be flagged for multiple workflows ("Investigate" and "Takedown" for example), however they can only utilize a single copy of an individual workflow (You cannot apply two "Investigate" workflows, for example). All workflows that have been applied to the current result will be listed and the current stage will be shown in the drop down.
To add a new workflow flag to the result, click the "+", choose a workflow flag, and click submit. If any options are required to add the workflow, a form will appear for you to fill out. Click "Add workflow" when complete.
To change the stage of an existing workflow, click the associate dropdown and select the new stage. If any options are required to add the workflow, a form will appear for you to fill out. Click "Add workflow" when complete.
Results can be crated via sync tasks, search tasks or manually. More details on creating results with tasks can be found in the Tasks page.
Manual results can be created a number of different ways:
- Clicking the "New Result" button found on the Results page
- Clicking the "Bulk Add Results" button and providing a new-line delimited list of FQDNs. You can optionally Tag these results as well.
- You can use the rails console to create results manually:
cd /path/scumblr
rails cres = Result.new(url: "https://www.netflix.com", title: "https://www.netflix.com", domain: "www.netflix.com")
res.saveYou can navigate to /results to get a list of Results.
You can click the drop down arrow on the left of the Result list to expand all Result details or click individual arrows to expand result details on a single result. You can also click the Show button to navigate to the individual result and view additional details including result events.
You can select a checkbox on any result and the Actions associated with that result will load. This includes the ability to assign a status to a result, add or remove result Tags (which you can use for easier searching) or assigning a particular Scumblr user to the restul.
If you select the "Update" button you can force generation of screenshots, so if you have setup integration into Sketchy, all results selected will be updated with new screenshots.
You can also delete results using the Actions page.
Columns are customizable. If you select the gear widget in the top of the Results page you can customize the list view. Built-in Fields are auto-filled while Metadata is a free form text field where you can customize which metadata attributes you'd like to list in this view.
Clicking the Tile button will render the view such that you can see the screenshots captured for results.
To go back to List view, click the list button:
You can list a specific result by clicking the Show button:
