diff --git a/administration/advanced.rst b/administration/advanced.rst index 83fd7f4..fa3c1a6 100644 --- a/administration/advanced.rst +++ b/administration/advanced.rst @@ -15,4 +15,32 @@ by setting a suitable threshold for ``Hide inactive Assets``. .. figure:: ../images/mc_advanced-settings.png :alt: Advanced Settings - Advanced Settings \ No newline at end of file + Advanced Settings + +SigDev Signatures +----------------- + +We offer a "preview" of our newest signatures, which contains our newest +rules. Those signatures have been processed by our automated pipeline and +passed the quality check - however our manual testing of those new rules +did not take place yet. + +We have those signatures to offer the newest rules to our customers in time +critical engagements. You have to carefully consider if the potential higher +rate of false positive warrants the usage of those rules. We generally recommend +to only use those rules if the currently available signatures are a few days old. + +To enable the ``SigDev`` / ``Preview`` Signatures, simply activate the checkbox +``Show Signature SigDev Option`` and submit your changes. + +.. figure:: ../images/mc_sigdev-signatures.png + :alt: Sigdev / Preview Signatures + + Sigdev / Preview Signatures + +Once you enabled the signatures, you can select them when creating a new (Group) Scan: + +.. figure:: ../images/mc_sigdev-thor.png + :alt: Sigdev / Preview Signatures Scanning + + Sigdev / Preview Signatures Scanning \ No newline at end of file diff --git a/images/mc_sigdev-signatures.png b/images/mc_sigdev-signatures.png new file mode 100644 index 0000000..f8e7d5d Binary files /dev/null and b/images/mc_sigdev-signatures.png differ diff --git a/images/mc_sigdev-thor.png b/images/mc_sigdev-thor.png new file mode 100644 index 0000000..7122b66 Binary files /dev/null and b/images/mc_sigdev-thor.png differ