{"id":1651,"date":"2022-06-02T12:38:16","date_gmt":"2022-06-02T10:38:16","guid":{"rendered":"https:\/\/dradisframework.com\/blog\/?p=1651"},"modified":"2022-06-02T15:39:06","modified_gmt":"2022-06-02T13:39:06","slug":"the-plugin-manager-is-not-so-scary-anymore","status":"publish","type":"post","link":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/","title":{"rendered":"The Plugin Manager is not so scary anymore!"},"content":{"rendered":"\n<p>So you\u2019ve been using Dradis for a while (or maybe you\u2019re a new user \u2014 welcome to the community \ud83d\udc4b), and you\u2019ve been avoiding the Plugin Manager because it\u2019s been a little intimidating. Its purpose may not have been clear, and the relationship between the Plugin Manager, uploading files, the Rules Engine, and what ends up in a project may have been fuzzy. You uploaded some scanner results, dove into your project, and realized things didn\u2019t appear as expected. Now you\u2019re clicking around trying to figure out what went wrong. Sounds familiar? We\u2019ll admit the Plugin Manager caused some confusion, but you\u2019re in for a treat with Dradis Pro v4.4.0!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>We took action to smooth out the friction<\/strong><\/h2>\n\n\n\n<p>Since most of the mystery and confusion seems to be around how changes in the Plugin Manager affect projects and reports, we decided to add a way for users to validate their Plugin Manager configurations. This validation happens on a per-tool basis against any report template uploaded to Dradis. Let\u2019s dive into some of the changes we made and the thought process behind some of those changes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Improvements to the user interface<\/strong><\/h2>\n\n\n\n<p>Before building out this new feature, we had to figure out where it would live. While deciding on that, we also determined it would be a great time to tidy up the Plugin Manager layout.<\/p>\n\n\n\n<p>When users first landed on the Plugin Manager view, we presented them with some explainer text and an example of how tool output translates to a Dradis note. This wasn\u2019t terrible, but it wasn\u2019t exactly super helpful or welcoming.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1269\" height=\"835\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-11.14.47-AM.png\" alt=\"\" class=\"wp-image-1653\"\/><\/figure>\n\n\n\n<p>Some of the issues we identified and set out to improve here were:<\/p>\n\n\n\n<ol><li>Parts of the copy were confusing<\/li><li>The example section wasn\u2019t clear to first-time users<\/li><li>Users didn\u2019t have a sense of direction (what do they need to do next?)<\/li><li>The plugins menu was not labelled or explained (users had to explore by clicking)<\/li><li>The layout wasn\u2019t very consistent with other views in the app<\/li><\/ol>\n\n\n\n<p>We decided to shuffle the layout around a little to tackle these points and make it more consistent with other views. Most of our views have a page title, the main content area and a sidebar, so we wanted to implement that here as well. Here is an early mock-up with some changes added with a fat marker (Title, subheading, section headers, and a sidebar with some tips).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1530\" height=\"1240\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/pm_index.jpg\" alt=\"\" class=\"wp-image-1654\"\/><\/figure>\n\n\n\n<p>Overall, the plan was to:<\/p>\n\n\n\n<ol><li>update the copy and move it to a tips panel in the sidebar<\/li><li>change the example section to a vertical layout with some arrows added to show the flow of stages in the process<\/li><li>update the headings of the three stages in the example section to make them clear<\/li><li>add a header to the plugins menu&nbsp;<\/li><li>add some copy (not pictured above) to direct the user to select a plugin from the menu on the left<\/li><\/ol>\n\n\n\n<p>These changes would bring consistency to the view, enable the user to quickly understand the relation of the three stages in the example, and give the user some direction as to what to do next. This design addresses all five issues we wanted to improve, so we started implementing these changes, and this is the new view as a result:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"965\" height=\"1030\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-3.23.59-PM.png\" alt=\"\" class=\"wp-image-1655\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Addition of Plugin Manager Validation&nbsp;<\/strong><\/h2>\n\n\n\n<p>So far, the above changes are fine and dandy, but they still don\u2019t help users bridge the gap between what they expect in their projects and what they get. This is where the shiny new validation feature comes in.<\/p>\n\n\n\n<p>The idea was to allow users to edit their plugin manager configurations and show them how it will jive with their report template of choice. The validation feature would work by having users select a plugin and a report template. It would show which fields are mapped correctly and which fields are missing. We had internal discussions about the best approach and where we could incorporate validation into the Plugin Manager. Initially, we thought about adding the validation section to the main Plugin Manager view, but we quickly decided against that and thought about a new view dedicated to this new validation feature:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1754\" height=\"1076\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/pm_show.jpg\" alt=\"\" class=\"wp-image-1656\"\/><\/figure>\n\n\n\n<p>This is the first look at the validation feature design and components. We\u2019ll get into the details a little farther down, but the overall idea is that users select a plugin, select a report template, and they see what\u2019s mapped correctly and what\u2019s not.<\/p>\n\n\n\n<p>This view would show all things related to the validation of the selected plugin, and at first, it seemed like it would work in terms of layout. The view would be consistent with other related views, it would give users all the validation functionality, and it would allow users to edit the plugin\u2019s configuration. However, after further design work and discussing with the team, we realized this implementation would be pretty annoying for users. It would require users to make an edit, come to this validation view, check their validation, realize they need to make further edits, go back to editing, then come back here to re-check their validation\u2026 you get the idea, way too much clicking around to get one thing done so back to the drawing board.<\/p>\n\n\n\n<p>Rather than making users navigate away from the validation view to make the edits to the configuration, we figured why not bring the validation feature to the edit view? Another upside of having validation added to the edit view is that we would eliminate the need for users to select which plugin they want to validate. Here is a screenshot of the current edit view for reference:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1269\" height=\"835\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-11.32.44-AM.png\" alt=\"\" class=\"wp-image-1657\"\/><\/figure>\n\n\n\n<p>It\u2019d be pretty crowded if we just dropped that validation section into this view, so we knew we had to make further refinements to the design.&nbsp;<\/p>\n\n\n\n<p>We also had to consider cases where there could be multiple exporters for the selected plugin (i.e. Qualys has Asset, Vuln, and WAS), and each of those exporters could have templates that map to Issues, Evidence, or Notes in Dradis Projects. It can be a bit of a guessing game to know which template maps to issues, notes, or evidence. Here is an example:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1269\" height=\"835\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-11.34.09-AM.png\" alt=\"\" class=\"wp-image-1658\"\/><\/figure>\n\n\n\n<p>The image above shows that Nessus has Report host, Report item, and Evidence templates. Users can guess that Nessus Evidence maps to Evidence in Dradis projects, but what about Report Item or Report Host? We decided to get rid of the guesswork for users. Let\u2019s jump into an early mock-up with some fat markered changes:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1229\" height=\"1052\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/pm_edit.jpg\" alt=\"\" class=\"wp-image-1659\"\/><\/figure>\n\n\n\n<p>This design iteration would:<\/p>\n\n\n\n<ul><li>Remove those long prefixes in the plugins menu to give us some more real estate to work with&nbsp;<\/li><li>Add a selector for Issue, Evidence, and Note (where applicable). This selector makes it easier for users to determine where things will end up in Dradis Projects; no more guessing!&nbsp;<\/li><li>Add the validation feature to the sidebar. This is a more condensed version of what we designed initially, but all of the same info is there, just arranged in a way that would be more effective in a sidebar format.<\/li><\/ul>\n\n\n\n<p>It\u2019s a good general direction, but dissecting this further, we didn\u2019t like that the preview is now stacked under the editor. This is awkward and inconsistent with every other view where we show previews. This also makes for awkward placement of the save button.&nbsp;<\/p>\n\n\n\n<p>Enter the final design iteration:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1229\" height=\"1052\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/pm_edit4.jpg\" alt=\"\" class=\"wp-image-1660\"\/><\/figure>\n\n\n\n<p>We really wanted the editor to be side by side with the preview, but we needed some more space to make the editor and preview usable. Ultimately, we decided to trade the plugin menu on the left for that extra space. Removing the plugin menu enabled us to have the side-by-side layout we wanted. The keen observer may have noticed that this design moves the exporter select menu out of the validation section and into the main content area. We made this change here because users not concerned with validation would still need to select the exporter if they wanted to make edits in the editor. The validation feature is only really concerned about which report template users wish to validate against.&nbsp;<\/p>\n\n\n\n<p>After a few more minor tweaks, we implemented this design and got this final result:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1267\" height=\"892\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-23-at-5.17.17-PM.png\" alt=\"\" class=\"wp-image-1661\"\/><\/figure>\n\n\n\n<p>Users are now able to:<\/p>\n\n\n\n<ul><li>Differentiate between Issue, Evidence, and Note templates<\/li><li>Differentiate between multiple exporters&nbsp;<\/li><li>Validate that all fields are mapped accordingly<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How to validate your configuration<\/strong><\/h2>\n\n\n\n<p>Now that we have this awesome new feature, let\u2019s take it for a spin. Let\u2019s say you have a report template with some issue\/evidence fields defined and your plugin of choice is Burp.&nbsp;<\/p>\n\n\n\n<p>Head over to the Plugin Manager and select Burp from the plugin menu:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1198\" height=\"1053\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-5.35.09-PM.png\" alt=\"\" class=\"wp-image-1662\"\/><\/figure>\n\n\n\n<p>Select the template you want to validate:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1198\" height=\"1053\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-5.38.27-PM.png\" alt=\"\" class=\"wp-image-1663\"\/><\/figure>\n\n\n\n<p>Then select the exporter (if there are options):<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1198\" height=\"1053\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-5.39.36-PM.png\" alt=\"\" class=\"wp-image-1664\"\/><\/figure>\n\n\n\n<p>At this point, you will see the selected plugin\u2019s template content and a preview of how it would appear based on some sample Burp output.<\/p>\n\n\n\n<p>Now you can select a report template in the Report Template Validation panel:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1198\" height=\"1053\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-5.40.03-PM.png\" alt=\"\" class=\"wp-image-1665\"\/><\/figure>\n\n\n\n<p>A validation check will now be executed, and you will see if any fields are not mapped as expected by the report template you selected. From here, you can make edits in the editor to add those missing fields. As you type, you will see the validation panel update in real-time to show you if the configuration passes validation.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1198\" height=\"1053\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-05-31-at-5.47.07-PM.png\" alt=\"\" class=\"wp-image-1666\"\/><\/figure>\n\n\n\n<p>Once you see a green validation checkmark, your configuration is valid. You can start importing tool output into Dradis and exporting reports knowing that fields will appear as expected.<\/p>\n\n\n\n<p>Pretty cool, right?<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>But wait, there\u2019s more!<\/strong><\/h2>\n\n\n\n<p>Earlier in this blog post, I mentioned that the Rules Engine is involved in all of this, but we haven\u2019t touched on it yet. If you\u2019re not familiar with the Rules Engine, it can be used to manipulate the plugin output before it imports everything into a project. For example, based on user-defined conditions, the Rules Engine can do things like:<\/p>\n\n\n\n<ul><li>Replace the description that comes from the plugin output with a custom description<\/li><li>Change the risk rating<\/li><li>Delete a finding<\/li><li>and much more.<\/li><\/ul>\n\n\n\n<p>Here is an example of a Rule being created in the Rules Engine:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1198\" height=\"980\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-06-01-at-11.17.49-AM.png\" alt=\"\" class=\"wp-image-1667\"\/><\/figure>\n\n\n\n<p>We have the condition that has to be met on the left and the actions that will be executed on the right.<\/p>\n\n\n\n<p>Up to now, when building conditions, users would have to manually enter the field that the condition would check, but this required knowledge of the plugin manager configuration. This was also prone to user errors as the field name had to exactly match a field in the plugin manager for the selected plugin. Considering that we already have these fields in Plugin Manager, there is no reason to put this burden on the user.&nbsp;<\/p>\n\n\n\n<p>With the changes to Plugin Manager, this seemed like a great time to update the Rules Engine and do something about that pesky field input.&nbsp;<\/p>\n\n\n\n<p>Another issue we tackled was the scalability of this view. With the 2-column setup (conditions on the left and the actions on the right), we found that the arrow in the center would often get misaligned. This arrow guides the user\u2019s flow from one side to the next, but when it gets misaligned, it becomes hard to understand and sometimes, it may even add confusion.&nbsp;<\/p>\n\n\n\n<p>Keeping the above in mind, we set out to design some changes. We wanted to ensure the view could scale well, accommodating both small and large numbers of conditions and actions for each rule. After some experimenting, we decided to flip the layout into a top-down orientation to give it more of a timeline or story-like feel that paints the complete picture for users.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1754\" height=\"1240\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/fm3.jpg\" alt=\"\" class=\"wp-image-1668\"\/><\/figure>\n\n\n\n<p>The view would list all conditions at the top, and as users transition their attention down the page, they would flow into the actions. We added some copy to guide the users between the conditions and actions. This layout scales well because regardless of how many conditions and actions there are, nothing gets misaligned and everything stays grouped together. Users start with their attention at the top, then transition towards the bottom with everything they need in between. We gave this design the green light, and after some further tweaks to the design, this is the implementation:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"1089\" height=\"1159\" src=\"https:\/\/dradisframework.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-06-01-at-5.24.32-PM.png\" alt=\"\" class=\"wp-image-1669\"\/><\/figure>\n\n\n\n<p>During this updated layout implementation, we also updated the condition boxes. They now have an uploader select to differentiate between the different uploaders a plugin may have (similar to the exporters in Plugin Manager). In addition, the field input has been replaced by a field selector. This Field selector lists all the possible fields based on the corresponding plugin manager configuration. Now users can simply select available fields without knowing what they are ahead of time or ensuring they don\u2019t mistype anything. The action boxes largely remained the same with just a minor tweak to the headers where we now number the actions to convey the order of the actions executing.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Give it a whirl<\/strong><\/h2>\n\n\n\n<p>All of these changes combined make for an easier UI to follow and a less complex UX to upload scanner output, map the fields to Dradis in the Plugin Manager, process the data through the Rules Engine, and get the desired results in projects.<\/p>\n\n\n\n<p>Give v4.4.0 a go and test out these new features yourself. Feel free to experiment with them and share your feedback with us. We\u2019d love to know how you like this new validation feature in the Plugin Manager and the updates to the Rules Engine.<\/p>\n\n\n\n<p>Happy Hacking \u270c\ufe0f<br>Matt<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So you\u2019ve been using Dradis for a while (or maybe you\u2019re a new user \u2014 welcome to the community \ud83d\udc4b), and you\u2019ve been avoiding the Plugin Manager because it\u2019s been a little intimidating. Its purpose may not have been clear, and the relationship between the Plugin Manager, uploading files, the Rules Engine, and what ends [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":1652,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":[]},"categories":[11,3,9],"tags":[16,20,12,19,17,15,14,13,18],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The Plugin Manager is not so scary anymore! - Dradis Framework Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Plugin Manager is not so scary anymore! - Dradis Framework Blog\" \/>\n<meta property=\"og:description\" content=\"So you\u2019ve been using Dradis for a while (or maybe you\u2019re a new user \u2014 welcome to the community \ud83d\udc4b), and you\u2019ve been avoiding the Plugin Manager because it\u2019s been a little intimidating. Its purpose may not have been clear, and the relationship between the Plugin Manager, uploading files, the Rules Engine, and what ends [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/\" \/>\n<meta property=\"og:site_name\" content=\"Dradis Framework Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-06-02T10:38:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-02T13:39:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dradis.com\/blog\/wp-content\/uploads\/2022\/06\/upload_flow.png\" \/>\n\t<meta property=\"og:image:width\" content=\"984\" \/>\n\t<meta property=\"og:image:height\" content=\"459\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Matt Budz\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nomadicmattbudz\" \/>\n<meta name=\"twitter:site\" content=\"@dradisfw\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Matt Budz\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/\",\"url\":\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/\",\"name\":\"The Plugin Manager is not so scary anymore! - Dradis Framework Blog\",\"isPartOf\":{\"@id\":\"https:\/\/dradis.com\/blog\/#website\"},\"datePublished\":\"2022-06-02T10:38:16+00:00\",\"dateModified\":\"2022-06-02T13:39:06+00:00\",\"author\":{\"@id\":\"https:\/\/dradis.com\/blog\/#\/schema\/person\/ffd82d26c0792ae986cfe1e48adac324\"},\"breadcrumb\":{\"@id\":\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dradis.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Plugin Manager is not so scary anymore!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dradis.com\/blog\/#website\",\"url\":\"https:\/\/dradis.com\/blog\/\",\"name\":\"Dradis Framework Blog\",\"description\":\"Information management for security teams\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dradis.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/dradis.com\/blog\/#\/schema\/person\/ffd82d26c0792ae986cfe1e48adac324\",\"name\":\"Matt Budz\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dradis.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/dbb93060941ab3126e881f72ce6741f2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/dbb93060941ab3126e881f72ce6741f2?s=96&d=mm&r=g\",\"caption\":\"Matt Budz\"},\"description\":\"Product Designer, Technology Enthusiast, Web Junkie and Formula 1 Fanatic.\",\"sameAs\":[\"https:\/\/twitter.com\/nomadicmattbudz\"],\"url\":\"https:\/\/dradis.com\/blog\/author\/matt\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Plugin Manager is not so scary anymore! - Dradis Framework Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/","og_locale":"en_US","og_type":"article","og_title":"The Plugin Manager is not so scary anymore! - Dradis Framework Blog","og_description":"So you\u2019ve been using Dradis for a while (or maybe you\u2019re a new user \u2014 welcome to the community \ud83d\udc4b), and you\u2019ve been avoiding the Plugin Manager because it\u2019s been a little intimidating. Its purpose may not have been clear, and the relationship between the Plugin Manager, uploading files, the Rules Engine, and what ends [&hellip;]","og_url":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/","og_site_name":"Dradis Framework Blog","article_published_time":"2022-06-02T10:38:16+00:00","article_modified_time":"2022-06-02T13:39:06+00:00","og_image":[{"width":984,"height":459,"url":"https:\/\/dradis.com\/blog\/wp-content\/uploads\/2022\/06\/upload_flow.png","type":"image\/png"}],"author":"Matt Budz","twitter_card":"summary_large_image","twitter_creator":"@nomadicmattbudz","twitter_site":"@dradisfw","twitter_misc":{"Written by":"Matt Budz","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/","url":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/","name":"The Plugin Manager is not so scary anymore! - Dradis Framework Blog","isPartOf":{"@id":"https:\/\/dradis.com\/blog\/#website"},"datePublished":"2022-06-02T10:38:16+00:00","dateModified":"2022-06-02T13:39:06+00:00","author":{"@id":"https:\/\/dradis.com\/blog\/#\/schema\/person\/ffd82d26c0792ae986cfe1e48adac324"},"breadcrumb":{"@id":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dradis.com\/blog\/2022\/06\/the-plugin-manager-is-not-so-scary-anymore\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dradis.com\/blog\/"},{"@type":"ListItem","position":2,"name":"The Plugin Manager is not so scary anymore!"}]},{"@type":"WebSite","@id":"https:\/\/dradis.com\/blog\/#website","url":"https:\/\/dradis.com\/blog\/","name":"Dradis Framework Blog","description":"Information management for security teams","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dradis.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/dradis.com\/blog\/#\/schema\/person\/ffd82d26c0792ae986cfe1e48adac324","name":"Matt Budz","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dradis.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/dbb93060941ab3126e881f72ce6741f2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dbb93060941ab3126e881f72ce6741f2?s=96&d=mm&r=g","caption":"Matt Budz"},"description":"Product Designer, Technology Enthusiast, Web Junkie and Formula 1 Fanatic.","sameAs":["https:\/\/twitter.com\/nomadicmattbudz"],"url":"https:\/\/dradis.com\/blog\/author\/matt\/"}]}},"jetpack_featured_media_url":"https:\/\/dradis.com\/blog\/wp-content\/uploads\/2022\/06\/upload_flow.png","jetpack_shortlink":"https:\/\/wp.me\/p3ijVs-qD","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1683,"url":"https:\/\/dradis.com\/blog\/2022\/06\/new-in-dradis-pro-v4-4\/","url_meta":{"origin":1651,"position":0},"title":"New in Dradis Pro v4.4","date":"June 20, 2022","format":false,"excerpt":"https:\/\/youtu.be\/tgfLYwINo0c Plugin Manager Validation The Plugin Manager has new validation! Previously, you'd need a file like issue.txt to use when configuring the Plugin Manager. Now, you can simply associate the Plugin Manager with one of the report templates on your Dradis instance. You'll see a validation check on the right\u2026","rel":"","context":"In &quot;Dradis_Pro&quot;","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/dradis.com\/blog\/wp-content\/uploads\/2022\/06\/Screen-Shot-2022-06-15-at-4.21.05-PM.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":921,"url":"https:\/\/dradis.com\/blog\/2018\/11\/new-in-dradis-pro-v3-1\/","url_meta":{"origin":1651,"position":1},"title":"New in Dradis Pro v3.1","date":"November 12, 2018","format":false,"excerpt":"Dradis Professional Edition is a collaboration and reporting tool for information security teams that will help you create reports, in a fraction of the time. For this release, we've squashed some pesky bugs and updated the system and its add-ons with new features that will make your team's life easier.\u2026","rel":"","context":"In &quot;Dradis_Pro&quot;","img":{"alt_text":"Showing the preflight validation","src":"https:\/\/i0.wp.com\/dradisframework.com\/blog\/wp-content\/uploads\/2018\/11\/preflight_output_validator.gif?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":21,"url":"https:\/\/dradis.com\/blog\/2012\/06\/new-in-dradis-pro-v15\/","url_meta":{"origin":1651,"position":2},"title":"New in Dradis Pro v1.5","date":"June 21, 2012","format":false,"excerpt":"Today we have pushed a new version of Dradis Professional Edition. This is the result of four months of hard work. Changes include: Upgraded look & feel (screenshots). Improved Word 2012 reporting: Custom screenshots. Custom document properties. Fully integrated with support for note re-ordering. Drag'n'drop file uploads with pre-upload preview.\u2026","rel":"","context":"In &quot;Dradis_Pro&quot;","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/4.bp.blogspot.com\/-oON5E1HZ5R0\/T4J-fZvO55I\/AAAAAAAAAFs\/H3FPvLlov9E\/s400\/plugin_manager-01.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1293,"url":"https:\/\/dradis.com\/blog\/2011\/04\/dradis-27-released\/","url_meta":{"origin":1651,"position":3},"title":"Dradis 2.7 released!","date":"April 19, 2011","format":false,"excerpt":"Improved command line API with Thor (thor -T\u00a0to view all commands)New\u00a0Configuration Manager\u00a0to handle all plugin config settingsNew\u00a0Upload Manager\u00a0that runs uploads in the background and updates the interface through AjaxNew plugins:Metasploit\u00a0importNeXpose\u00a0(.xml) uploadOpenVAS\u00a0(.xml) uploadSureCheck\u00a0(.sc) uploadw3af\u00a0(.xml) uploadWeb Exploitation Framework (wXf)\u00a0uploadUpdated plugins:Nessus\u00a0plugin supports .nessus v2Vuln::DB\u00a0import updated to support the latest releaseBugs fixed: #2888332, #2973256Update\u2026","rel":"","context":"In &quot;Release&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":294,"url":"https:\/\/dradis.com\/blog\/2013\/06\/new-in-dradis-pro-v17\/","url_meta":{"origin":1651,"position":4},"title":"New in Dradis Pro v1.7","date":"June 18, 2013","format":false,"excerpt":"Today we have pushed a new version of Dradis Professional Edition: Dradis Pro v1.7. This is the result of eight months of hard work, a bit longer than usual, but the release is packed with lots of handy improvements. Here are some changes: New Issue\/Evidence architecture: read about why this\u2026","rel":"","context":"In &quot;Dradis_Pro&quot;","img":{"alt_text":"A screenshot showing note contents, issues and attachments in one page","src":"https:\/\/i0.wp.com\/securityroots.com\/blog\/wp-content\/uploads\/2013\/05\/dradispro_v1.7-02.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1302,"url":"https:\/\/dradis.com\/blog\/2011\/05\/dradis-271-released\/","url_meta":{"origin":1651,"position":5},"title":"Dradis 2.7.1 released!","date":"May 24, 2011","format":false,"excerpt":"This bug-fixing release features: Several\u00a0closed issues: #3, #4, #6, #7, #8 and #10.A cleaner, leaner note editor: And all the goodness introduced in 2.7.0: Improved command line API with Thor (thor -T\u00a0to view all commands)New\u00a0Configuration Manager\u00a0to handle all plugin config settingsNew\u00a0Upload Manager\u00a0that runs uploads in the background and updates the\u2026","rel":"","context":"In &quot;Release&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts\/1651"}],"collection":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/comments?post=1651"}],"version-history":[{"count":5,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts\/1651\/revisions"}],"predecessor-version":[{"id":1676,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/posts\/1651\/revisions\/1676"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/media\/1652"}],"wp:attachment":[{"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/media?parent=1651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/categories?post=1651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dradis.com\/blog\/wp-json\/wp\/v2\/tags?post=1651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}