Function download_scan_report

webapp_modern.py:17464–17602

Download report for a specific scan

(scan_id)

            # Use the first real finding for enrichment (or combine multiple findings)
            base_finding = actual_findings[0]
            
            # Create enriched finding object from actual scan data
            finding = {
                'id': base_finding.get('id', hashlib.md5(target.encode()).hexdigest()[:12]),
                'host': target,
                'vulnerability': base_finding.get('vulnerability', base_finding.get('service', 'Unknown')),
                'severity': base_finding.get('severity', 'medium'),
                'port': base_finding.get('port'),
                'service': base_finding.get('service'),
                'details': base_finding.get('details', {}),
                'scan_timestamp': base_finding.get('timestamp', datetime.now().isoformat())
            }
            
            # Enrich the finding
            import asyncio
            enriched_finding = asyncio.run(threat_intelligence.enrich_finding_with_threat_intelligence(finding))
            
            # Convert risk score from 0-10 scale to 0-100 scale for frontend
            risk_score_100 = min(int(enriched_finding.dynamic_risk_score * 10), 100)
            
            return jsonify({
                'success': True,
                'target': target,
                'risk_score': risk_score_100,
                'dynamic_risk_score': enriched_finding.dynamic_risk_score,
                'executive_summary': enriched_finding.executive_summary,
                'recommended_actions': enriched_finding.recommended_actions,
                'threat_contexts_count': len(enriched_finding.threat_contexts),
                'attribution': {
                    'actor_name': enriched_finding.attribution.actor_name if enriched_finding.attribution else None,
                    'confidence': enriched_finding.attribution.confidence if enriched_finding.attribution else 0.0
                },
                'enriched_finding_id': finding['id']
            })
            
        except Exception as e:
            logger.error(f"Error enriching target: {e}")
            return jsonify({'error': str(e)}), 500

@app.route('/api/threat-intelligence/dashboard')
def get_threat_intelligence_dashboard():
    """Get threat intelligence dashboard data"""
    with _network_context_from_request():
        try:
            if not threat_intelligence:
                return jsonify({'error': 'Threat intelligence system not available'}), 503
            
            dashboard_data = {
                'summary': threat_intelligence.get_enriched_findings_summary(),
                'recent_findings': [],
                'risk_distribution': {'critical': 0, 'high': 0, 'medium': 0, 'low': 0},
                'threat_sources_status': []
            }
            
            # Get recent enriched findings
            recent_findings = []
            for finding_id, enriched_finding in list(threat_intelligence.enriched_findings.items())[-10:]:
                recent_findings.append({