Consult findings and evidence

A finding is relevant information identified during the mission collections. Wasa gathers the necessary context to evaluate each occurrence without requiring knowledge of how the collection was carried out.

What you will do

You will locate findings, understand severity and classification and consult the data presented as evidence.

Who can do this

Users with access to the mission can consult the findings. The disclosure of a sensitive field depends on the permission and availability indicated on the screen itself.

Before you start

• Confirm the open organization and mission.
• Wait for the mission to have at least one collection with results.
• Handle sensitive data only when it is necessary for analysis and your permission allows it.

Menu path

In the main menu, select TIME → Quests → choose the type → open the quest → Finds.

"Finds" is the visible label on the interface for mission findings. "Finding", when it appears in an action, means an individual finding.

Steps

1. Open Finds and check the number of results loaded.
2. Use Search find to search for a known value or select Filters to refine by classification, severity, agent, parameter or other available field.
3. On each card, read the related parameter, the agent, the title, the severity, the classification and the date of the Last observation.
   • For Public Code Exposure findings, use the repository and, when shown, the file path below the title to distinguish similar references. Wasa may omit the path when it is not safe to display; the finding and repository remain available.
4. Interpret the severity as a priority of attention:

• Informative: useful context, without indication of urgency.
• Low: reduced impact or exposure.
• Average: requires evaluation and prioritization.
• High: requires priority attention.
• Criticism: requires immediate evaluation.

1. Use the classification to track the analysis. The visible states can include Open, Under review, Reopened, Revalidated, Legitimate, Mitigated, Accepted risk and False positive.
2. Select View finding data. This action opens the visible data that supports the finding, organized by topic, as well as the level of confidence and the source when available.
3. When a field is marked as Sensitive, keep it hidden if it is not necessary. If Show sensitive field is available and you have authorization, only show it during analysis and use Hide sensitive field when you are done.
4. If there is a Source link, open it only when you need to confirm the presented source. The link is opened in a new page.
5. Use Load more when the list informs you that there are still other results.

Expected result

You locate the correct finding, understand its priority and consult the visible evidence without unnecessarily exposing sensitive fields.

Common problems

Related tasks

• Follow the execution
• Screening and commenting
• Consult the graph