Monitoring¶

Summary

When monitoring is enabled, the platform performs a daily analysis of the firmware. If there are new findings, you will receive an email listing the differences, but you can also compare the two analyses directly on the platform.

Enable monitoring¶

There are multiple ways to turn on monitoring:

When uploading a firmware, click on Monitoring.
Enable Monitoring from any page within Firmware analysis view.
Enable Monitoring in the Firmware info page.

ONEKEY's data on known vulnerabilities is constantly updated so enabling monitoring ensures that the analysis of the firmware remains up to date. Additionally, you will be notified of new vulnerabilities affecting the firmware, as mandated by many cybersecurity guidelines.

Check monitoring result¶

Automatic email¶

If the automatic monitoring analysis shows changes compared to the previous one, you will receive an email with the findings. The email highlights the new and dropped issues/CVEs/components and gives you a link to the full comparison.

Note

The email arrives to the Uploader's inbox.

Compare analyses¶

Select a firmware.
Open the Analysis History page (under the History dropdown).
Click the checkboxes next to the analyses you want to compare (you can select two).
Click the Compare firmwares button.

The platform saves every firmware analysis under the Analysis History page, monitoring runs do not overwrite each other.

By default, you will only see analyses that show changes compared to the previous one. To see all analyses uncheck Show changes only.

Automatic cleanup

Old monitoring runs and analyses that show no change compared to the previous run are automatically deleted after a grace period. The results are still available for download as an .xlsx file.

Manually triggered analyses are never deleted automatically.