Skip to content

Commit

Permalink
[NO-TICKET] Minor updates (#387)
Browse files Browse the repository at this point in the history
* [NO-TICKET] Minor updates

* [NO-TICKET] Minor updates
  • Loading branch information
ana-dashuk-cobalt authored Jun 13, 2023
1 parent 4c49cf4 commit f83591d
Show file tree
Hide file tree
Showing 15 changed files with 20 additions and 92 deletions.
2 changes: 1 addition & 1 deletion content/en/BestPractices/_index.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: "Best Practices for Security"
linkTitle: "Best Practices"
linkTitle: "Security Best Practices"
weight: 600
description: >
Recommendations for developers focused on security.
Expand Down
1 change: 1 addition & 0 deletions content/en/Cobalt-API/create_asset.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
title: "Create or Modify an Asset"
linkTitle: "Create/Modify an Asset"
weight: 140
aliases: /apiusecases/create_asset/
description: >
Run this sequence of REST calls to create an asset.
---
Expand Down
1 change: 1 addition & 0 deletions content/en/Cobalt-API/get-findings.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
title: "Retrieve Findings and Import Them to Google Sheets"
linkTitle: "Import Findings to Google Sheets"
weight: 150
aliases: /apiusecases/get-findings/
description: >
Learn how to retrieve all findings using the Cobalt API and import them to Google Sheets.
---
Expand Down
24 changes: 12 additions & 12 deletions content/en/Getting started/pentest-preparation.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,6 @@ The information you need to prepare before launching a pentest depends on your [

## Web Application

Learn [how to scope a pentest for a web app](/getting-started/planning/#web) in the Cobalt UI.

**Information needed to set up your pentest**:

- Depending on the type of your web application:
Expand All @@ -47,9 +45,9 @@ Learn [how to scope a pentest for a web app](/getting-started/planning/#web) in
- List of priorities (for example, focus on new features or specific workflows)
- Attack vectors you're most concerned about

## Mobile Application
Learn [how to scope a pentest for a web app](/getting-started/planning/#web) in the Cobalt UI.

Learn [how to scope a pentest for a mobile app](/getting-started/planning/#mobile) in the Cobalt UI.
## Mobile Application

**Information needed to set up your pentest**:

Expand All @@ -71,9 +69,9 @@ Learn [how to scope a pentest for a mobile app](/getting-started/planning/#mobil
- Product walk-through or documentation, if available
- Special requirements for the pentest, if any

## API
Learn [how to scope a pentest for a mobile app](/getting-started/planning/#mobile) in the Cobalt UI.

Learn [how to scope a pentest for an API](/getting-started/planning/#api) in the Cobalt UI.
## API

**Information needed to set up your pentest**:

Expand All @@ -88,9 +86,9 @@ Learn [how to scope a pentest for an API](/getting-started/planning/#api) in the
- Documentation, if available: Swagger, Postman, SoapUI projects or OpenAPI files
- Special requirements for the pentest, if any

## External Network
Learn [how to scope a pentest for an API](/getting-started/planning/#api) in the Cobalt UI.

Learn [how to scope a pentest for an external network](/getting-started/planning/#external-network) in the Cobalt UI.
## External Network

**Information needed to set up your pentest**:

Expand All @@ -102,9 +100,9 @@ Learn [how to scope a pentest for an external network](/getting-started/planning
- High-level overview of the network (preferably, with a network diagram)
- Special requirements for the pentest, if any

## Internal Network
Learn [how to scope a pentest for an external network](/getting-started/planning/#external-network) in the Cobalt UI.

Learn [how to scope a pentest for an internal network](/getting-started/planning/#internal-network) in the Cobalt UI.
## Internal Network

**Information needed to set up your pentest**:

Expand All @@ -116,6 +114,8 @@ Learn [how to scope a pentest for an internal network](/getting-started/planning
- Special requirements for the pentest, if any
- Other considerations that may affect the scope: for example, multiple [jump boxes](/getting-started/glossary/#jump-box) on the network

Learn [how to scope a pentest for an internal network](/getting-started/planning/#internal-network) in the Cobalt UI.

Because Cobalt pentesters execute pentests for internal networks remotely, they need:

- Access to the internal corporate network through a stable VPN connection; and
Expand Down Expand Up @@ -150,8 +150,6 @@ Cobalt pentesters can test services on the following platforms:

Each platform includes different categories of services, such as EC2, databases, and machine learning engines.

Learn [how to scope a pentest for a cloud configuration](/getting-started/planning/#cloud-configuration) in the Cobalt UI.

**Information needed to set up your pentest**:

- Your cloud platform: GCP, AWS, or Azure
Expand All @@ -166,6 +164,8 @@ Learn [how to scope a pentest for a cloud configuration](/getting-started/planni
- IAM read-only access for pentesters (for example, SecurityAudit and ViewOnlyAccess for AWS)
- Special requirements for the pentest, if any

Learn [how to scope a pentest for a cloud configuration](/getting-started/planning/#cloud-configuration) in the Cobalt UI.

## Combined Assets

For an asset that combines multiple asset types, follow the guidelines for each type:
Expand Down
6 changes: 3 additions & 3 deletions content/en/Integrations/Beta/configure-beta.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,9 +27,9 @@ To configure the integration, complete the following steps:
To complete the configuration, you need the following:

- **Webhook URL**: URL that is used in the configuration to send integration events. We'll send you your webhook URL in the onboarding email.
- **Organization Token**: Unique organization token used in API calls. We'll send you your organization token in the onboarding email.
- **API Token**: Your personal API token required to authorize access to the Cobalt API. Learn [how to create an API token](/cobalt-api/create-personal-api-token/).
- **Integration Credentials**: Credentials for the connected platform.
- **Organization token**: Unique organization token used in API calls. We'll send you your organization token in the onboarding email.
- **API token**: Your personal API token required to authorize access to the Cobalt API. Learn [how to create an API token](/cobalt-api/create-personal-api-token/).
- **Integration credentials**: Credentials for the connected platform.

## Step 1: Create a Webhook

Expand Down
8 changes: 0 additions & 8 deletions content/en/Integrations/Jira/jira-cloud.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,14 +12,6 @@ Learn how to integrate **Jira Cloud** with Cobalt. The availability of this feat
If your organization uses Jira Server or Data Center, see [Jira Server and Data Center Integration](/integrations/jira/jira-server-dc/).
{{% /pageinfo %}}

In this article:

- [Configuration](#configuration)
- [Step 1: Connect the Jira Plugin](#step-1-connect-the-jira-plugin)
- [Step 2: Configure the Integration for a Pentest](#step-2-configure-the-integration-for-a-pentest)
- [How the Integration Works](#how-the-integration-works)
- [Deactivate the Integration](#deactivate-the-integration)

## Configuration

**Required permissions**:
Expand Down
9 changes: 0 additions & 9 deletions content/en/Integrations/Jira/jira-server-dc.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,15 +12,6 @@ Learn how to integrate **Jira Server** or **Jira Data Center** with Cobalt. The
If your organization uses Jira Cloud, see [Jira Cloud Integration](/integrations/jira/jira-cloud/).
{{% /pageinfo %}}

In this article:

- [Configuration](#configuration)
- [Step 1: Connect the Jira Plugin](#step-1-connect-the-jira-plugin)
- [Step 2: Configure the Integration for a Pentest](#step-2-configure-the-integration-for-a-pentest)
- [How the Integration Works](#how-the-integration-works)
- [Attachments Support](#attachments-support)
- [Deactivate the Integration](#deactivate-the-integration)

## Configuration

**Required permissions**:
Expand Down
5 changes: 0 additions & 5 deletions content/en/Integrations/Jira/push-findings.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,6 @@ description: >
Learn how auto-push works and how to push findings to Jira manually.
{{% /pageinfo %}}

In this article:

- [How Auto-Push Works](#how-auto-push-works)
- [Push Findings Manually](#push-findings-manually)

## How Auto-Push Works

Once an [Organization Owner](/getting-started/glossary/#organization-owner) or [Member](/getting-started/glossary/#organization-member) has enabled the Jira integration on a pentest, findings start to automatically synchronize with the selected Jira project. The **Auto-Push** option is enabled by default.
Expand Down
7 changes: 0 additions & 7 deletions content/en/Integrations/Jira/troubleshoot-jira-integration.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,13 +10,6 @@ description: >
If you experience unexpected behavior or have issues with Cobalt plugins for Jira, read our troubleshooting tips.
{{% /pageinfo %}}

In this article:

- [Common Issues](#common-issues)
- [Findings Not Being Pushed to Jira](#findings-not-being-pushed-to-jira)
- [Jira Issue Can't Be Created](#jira-issue-cant-be-created)
- [Retrieve Jira Server Logs for Troubleshooting](#retrieve-jira-server-logs-for-troubleshooting)

## Common Issues

### Findings Not Being Pushed to Jira
Expand Down
8 changes: 0 additions & 8 deletions content/en/Integrations/defectdojo.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,6 @@ description: >
Configure the integration to import Cobalt findings into the DefectDojo platform.
{{% /pageinfo %}}

In this article:
- [Integration Overview](#integration-overview)
- [What You Need](#what-you-need)
- [Step 1: Add a Tool Type](#step-1-add-a-tool-type)
- [Step 2: Add a Tool Configuration](#step-2-add-a-tool-configuration)
- [Step 3: Add an API Scan Configuration](#step-3-add-an-api-scan-configuration)
- [Step 4: Import Findings](#step-4-import-findings)

## Integration Overview

[DefectDojo](https://github.com/DefectDojo/django-DefectDojo) is a security orchestration and vulnerability management platform. It's a free open source tool that allows you to manage your application security program and streamline your DevSecOps workflows.
Expand Down
8 changes: 0 additions & 8 deletions content/en/Integrations/github.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,6 @@ description: >
Learn how to set up an integration between Cobalt and GitHub (Cloud only). The availability of this feature depends on your [PtaaS tier](/platform-deep-dive/credits/ptaas-tiers/).
{{% /pageinfo %}}

In this article:

- [Integration Overview](#integration-overview)
- [Configure the Integration](#configure-the-integration)
- [Push Findings to GitHub](#push-findings-to-github)
- [Deactivate the Integration](#deactivate-the-integration)
- [Frequently Asked Questions](#frequently-asked-questions)

## Integration Overview

[GitHub](https://github.com/) is a code hosting platform for version control and collaboration.
Expand Down
8 changes: 0 additions & 8 deletions content/en/Integrations/kenna-security.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,14 +12,6 @@ Configure the integration to import Cobalt findings into the Kenna Security plat
You can also refer to the Kenna Security [documentation](https://github.com/KennaSecurity/toolkit/tree/main/tasks/connectors/cobaltio#readme).
{{% /pageinfo %}}

In this article:
- [Integration Overview](#integration-overview)
- [What You Need](#what-you-need)
- [Step 1: Create a Kenna Security Data Importer Connector](#step-1-create-a-kenna-security-data-importer-connector)
- [Step 2: Get the Kenna Security Toolkit Image](#step-2-get-the-kenna-security-toolkit-image)
- [Step 3: Run the Cobalt Task](#step-3-run-the-cobalt-task)
- [Step 4: View Imported Findings](#step-4-view-imported-findings)

## Integration Overview

[Kenna Security](https://www.cisco.com/c/en/us/products/security/kenna-is-part-of-cisco.html) is a risk and vulnerability intelligence platform.
Expand Down
8 changes: 0 additions & 8 deletions content/en/Integrations/webhooks.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,6 @@ description: >
Configure webhooks to subscribe to real-time updates for your pentests.
{{% /pageinfo %}}

In this article:

- [Introducing Webhooks](#introducing-webhooks)
- [Before You Start](#before-you-start)
- [Webhook Events](#webhook-events)
- [Configure Webhooks in the UI](#configure-webhooks-in-the-ui)
- [Troubleshoot Webhooks](#troubleshoot-webhooks)

## Introducing Webhooks

With our API-based webhooks, you can set up an integration between your app and the Cobalt platform to get notifications for pentest events. We’ll send you updates for each event to your URL through an HTTP POST request.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,14 +11,6 @@ description: >
Cobalt supports **identity provider-initiated SAML single sign-on (SSO)**. As an Organization Owner, you can configure SAML SSO with your preferred identity provider.
{{% /pageinfo %}}

In this article:

- [SAML SSO Overview](#saml-sso-overview)
- [General Configuration Workflow](#general-configuration-workflow)
- [Enforce SAML SSO](#enforce-saml-sso)
- [Configuration Instructions for Specific Identity Providers](#configuration-instructions-for-specific-identity-providers)
- [Troubleshoot Your SAML SSO Configuration](#troubleshoot-your-saml-sso-configuration)

## SAML SSO Overview

{{% sso-definition %}} The Cobalt SSO service is based on the [Security Assertion Markup Language 2.0 (SAML 2.0)](/getting-started/glossary/#security-assertion-markup-language) specifications. Learn more about [SAML SSO](/getting-started/glossary/#saml-single-sign-on-sso).
Expand Down
9 changes: 2 additions & 7 deletions content/en/Professional Services/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,15 +7,10 @@ description: >
---

{{% pageinfo %}}
Professional Services are an extension of our core [PtaaS platform](https://www.cobalt.io/ptaas) offering. Our security experts can run advanced pentest engagements for your organization, acting as an extension of your internal security team.<br><br><a class="btn btn-outline-primary rounded" href="mailto:professional_services@cobalt.io" target="_blank">Need an Advanced Pentest? Contact Us »</a>
Professional Services are an extension of our core [PtaaS platform](https://www.cobalt.io/ptaas) offering. Our security experts can run advanced pentest engagements for your organization, acting as an extension of your internal security team.
{{% /pageinfo %}}

**In this article:**

- [Pentest Engagements](#pentest-engagements)
- [Pentest Process](#pentest-process)
- [Asset Types](#asset-types)
- [How to Launch a Pentest](#how-to-launch-a-pentest)
<a class="btn btn-outline-primary rounded" href="mailto:professional_services@cobalt.io" target="_blank">Need an Advanced Pentest? Contact Us »</a>

## Pentest Engagements

Expand Down

0 comments on commit f83591d

Please sign in to comment.