Skip to content

Conversation

@GaetanSantucci
Copy link
Member

No description provided.

@GaetanSantucci GaetanSantucci self-assigned this Dec 5, 2025
@GaetanSantucci GaetanSantucci added this to the Release 2.1.0 milestone Dec 5, 2025
@GaetanSantucci GaetanSantucci changed the title [docs] feat(scv): add domains documentation [docs] feat(scv): add domains documentation (#236) Dec 5, 2025
@gabriel-peze gabriel-peze self-assigned this Dec 5, 2025
@damgouj damgouj self-requested a review December 8, 2025 08:22


<a id="openaev-scv"></a>
#### OpenAEV SCV
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You have to do a "OpenAEV 2.1.0" migration section before creating a new migration

@@ -0,0 +1,22 @@
# OpenAEV SCV

!!! info ""
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am sorry but not sure to understand this "breaking-change". It's not normal to deploy again our Docker when we have our OpenAEV updated ? I thought if OpenAEV is upgraded, all the projects linked are too.

|------------------------|--------------------------------------------------------------------------------------------------------------------|
| **ENDPOINT** | Evaluates endpoints security controls such as EDR, SIEM |
| **DATA EXFILTRATION** | Assesses the ability to detect or block attempts to exfiltrate data and check security controls like DLP & SIEM |
| **URL FILTERING** | Validates mechanisms controlling web access and URL categorization or filtering with security systems like proxy, ZTNA |
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

two spaces between filtering and with ;)

Domains are primarily defined at the Payload level. Each payload declares one or more Domains that describe the security control category involved in its execution. This ensures consistent and predictable classification across the platform.

### Injector Contracts
In some cases, an Injector Contract may also carry a Domain.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is is important to describe which cases or not ?

@gabriel-peze gabriel-peze requested a review from damgouj December 12, 2025 09:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[SCV] Categorize existing payloads into domains

4 participants