Failed to determine the scan type

[christ...@gmail.com]

Hello everyone,

I just downloaded the 64-bit addition on a windows 7 (64-bit) machine. I created a "team" and tried to upload a Trustwave scan in XML format. when I select the scan I receive the following error "Failed to determine the scan type."

I spoke with a rep from trustwave that explained I would need to add "XML import support/compatibility should be added on the ThreadFix side." Is this accurate? I do not see a plugin for XML support.

P.S. Is there a full manual for ThreadFix? this getting Started Doc doesn't cut it.

[christ...@gmail.com]

I should have mentioned this problem is on ThreadFix 2.2 and I am able to import the xml test-scans that come with the install.

Thanks

[Mac Collins]

Hi,

Our wiki has a lot more pages than just the Getting Started page, but if
there's something that we don't address please let us know so we can
update it.

We do have Trustwave Hailstorm parsing built into ThreadFix 2.2. It's not
a plugin that you download separately.

I'd like to fix your Trustwave error, but we need a sample file. Can you
scan a demo application and supply us with the result?
http://testphp.vulnweb.com/ is a good demo application. Alternatively, you
could sanitize the data in your current report and send it to us. Scanners
change their formats from time to time, so ThreadFix may currently be
incompatible with your version of Trustwave. We like to keep our parsers
updated and if we can update our support it will likely go out in a minor
point release.

Thanks,
Mac

On 4/3/15, 11:24 AM, "christ...@gmail.com" <christ...@gmail.com>
wrote:

>--
>You received this message because you are subscribed to the Google Groups
>"ThreadFix" group.
>To unsubscribe from this group and stop receiving emails from it, send an
>email to threadfix+...@googlegroups.com.
>For more options, visit https://groups.google.com/d/optout.

[christ...@gmail.com]

The scans are done by Cenzic. I can sanitize a scan. Where should I send it?

[Mac Collins]

Please send to sup...@threadfix.org. Thanks for helping us with this.

Thanks,
Mac

On 4/3/15, 3:06 PM, "christ...@gmail.com" <christ...@gmail.com>
wrote:

[Dan Cornell]

I see Mac is working with you on the example file. With regard to the manual - the main link to the wiki is here:

https://github.com/denimgroup/threadfix/wiki

That has more information about how to use the various capabilities of ThreadFix. As Mac mentioned - if there's any additional info you need just let us know.

Thanks,

Dan