We would like to share with you a new and exciting CxSAST capability: Security Content Packs.
...
The Ruleset Content Pack is installed on the CxManager machines, unless otherwise indicated. In a distributed environment, the Ruleset Content Pack does not need to be installed on engine machines, just on the CxManager machine (which has access to the database). Once installed, the Ruleset Content Pack cannot content pack can be uninstalled with the dedicated uninstaller in the package.
The installer can also be executed in CLI (silent) mode, similarly to Hotfix installation.
...
Each Ruleset Content Pack includes improvements to queries, and optionally also to presets. Technically, these changes are delivered through DB upgrade scripts which affect relevant tables.
Content
Each Ruleset Content Pack includes improvements to queries, and optionally also to presets. Technically, these changes are delivered through DB upgrade scripts which affect relevant tables.
Detailed content descriptions can be found in the table below:
Content Pack Version | Compatible Version | Release Date | Content |
---|---|---|---|
CP.8.9.0.60123 | 8.9.0 | 17 April 2020 | This Content Pack (CP) includes improvements for reducing the amount of false positive results. Installation order It is not a cumulative content pack for the Java content, so both content packs should be installed when requiring Java and C# improvements. The following improvements were made for C# queries:
This content pack includes all the improvements made for C# High Risk queries and some C# Medium threat queries. The content pack uses a new numbering convention which will ease the readability of the version. Looking into accuracy improvement, there are some queries that can have differences in the results after the installation of the content pack. The changes were done over several queries to provide the improvements. In this Ruleset Content Pack the following improvements were done for the C# language:
|
.
...
Read More
Detailed content descriptions can be found using the links below:
...