Skip to content

Commit

Permalink
Update docs on muting CSM issues
Browse files Browse the repository at this point in the history
  • Loading branch information
janine-c committed Dec 4, 2024
1 parent 86ca840 commit 2258889
Show file tree
Hide file tree
Showing 3 changed files with 15 additions and 18 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -23,43 +23,40 @@ For example, the CSM Misconfigurations rule ['Block Public Access' feature is en

**Note**: Muting a misconfiguration removes it from the calculation of your posture score.

{{< img src="security/csm/mute_issue.png" alt="The Mute Issue dialog box contains fields for specifying the reason and duration of the mute" style="width:100%;">}}
{{< img src="security/csm/mute_issue-2.png" alt="The Mute Issue dialog box contains fields for specifying the reason and duration of the mute" style="width:100%;">}}

1. On the misconfiguration, issue, or identity risk side panel, select one or more resources.
2. Select **Actions** > **Mute for...**.
3. Select a reason for the mute, for example, a fix is pending, it's a false positive, or it's an accepted risk.
1. On the misconfiguration, vulnerability, or identity risk side panel, find the triage status dropdown for the resource.
- If the side panel is for a single resource, under **Next Steps**, the list is under **Triage**.
- If the side panel is for a list of aggregated resources, select one or more resources in the table, then find the list in the **Status** column.
2. Open the list with the current triage status and click **Muted**. The Mute issue window opens.
3. Select a reason for the mute; for example, a fix is pending, it's a false positive, or it's an accepted risk.
4. Enter an optional **Description**.
5. Select the duration of the mute.
6. Click **Mute**.
6. Click **Mute**. The Mute issue window closes.

### Unmute an issue

Muted issues automatically unmute after the specified mute duration expires. You can also manually unmute an issue.

1. On the misconfiguration, issue, or identity risk side panel, select the resources with the muted issue.
2. Select **Actions** > **Unmute**.
3. Select a reason for the unmute, for example, there's no pending fix, it was a human error, or it's no longer an accepted risk.
4. Enter an optional **Description**.
5. Click **Unmute**.
1. On the misconfiguration, vulnerability, or identity risk side panel, find the triage status dropdown for the resource.
- If the side panel is for a single resource, under **Next Steps**, the list is under **Triage**.
- If the side panel is for a list of aggregated resources, select one or more resources in the table, then find the list in the **Status** column.
2. Click **Muted** to open the dropdown, then select a new triage status. The triage status updates immediately for the selected resource(s).

### Audit your muted issues

To view your organization's muted issues:

- Sort by the **Muted** column on the Security Inbox and Misconfigurations issue explorer.
- Filter the Security Inbox, Misconfigurations, and Identity Risks issue explorer using the **Muted** facet.
- Sort by the **Muted** column on the Misconfigurations issue explorer.
- Filter the Misconfigurations and Identity Risks issue explorers using the **Muted** facet.

To audit the mute history for a misconfiguration:

1. Open the misconfiguration side panel.
2. Select the resource with the muted misconfiguration.
3. On the **Overview** tab, use the **Resource evaluation over time** timeline to view when the misconfiguration was muted or unmuted over a specified period of time (up to six months).

{{< img src="security/csm/muted_finding_evaluation_over_time.png" alt="The resource evaluation over time timeline shows the history of the misconfiguration including periods when it was muted" style="width:90%;">}}

4. Click the **Timeline** tab to view a chronological history of the misconfiguration. Hover over a mute or unmute action to view additional details, such as the reason for the mute, how long the mute is intended to last, and who muted it.
3. Click the **Timeline** tab to view a chronological history of the misconfiguration. Hover over a mute or unmute action to view additional details, such as the reason for the mute, how long the mute is intended to last, and who muted it.

{{< img src="security/csm/muted_finding_timeline.png" alt="The Timeline tab shows a chronological history of the misconfiguration, including details on when a misconfiguration was muted" style="width:90%;">}}
{{< img src="security/csm/muted_finding_timeline-2.png" alt="The Timeline tab shows a chronological history of the misconfiguration, including details on when a misconfiguration was muted" style="width:90%;">}}

## Further reading

Expand Down
Binary file added static/images/security/csm/mute_issue-2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 2258889

Please sign in to comment.