Feature Support : IAST Scheduling & IAST Scan Ignore

[lovesh-ap]

IAST Scheduling
Schedule IAST, which will allow users to schedule the startup and scanning of IAST and duration will grant them capability to set run duration of the IAST scan in minutes.

scan_schedule:
     delay: 30			  #In minutes, default is 0 min
     duration: 300		  #In minutes, default will be forever
     schedule: “0 0 * * * ?” #delay takes precedence over schedule
     allow_iast_sample_collection: false #default is false

Ignore IAST Scan, feature allows users to ignore the scanning of certain APIs, categories, or parameters based on their configuration.

skip_iast_scan:
    api:
      - \/api\/v1\/login.*
      - \/api\/v1\/.*?update.*
    parameters:
      header: ["X-Forwaded-For"]
      query: ["count"]
      body: ["object.cc_number"]
    iast_detection_category:
      insecure_settings: false
      invalid_file_access: false
      sql_injection: false
      nosql_injection: false
      ldap_injection: false
      javascript_injection: false
      command_injection: false
      xpath_injection:false
      ssrf: false
      rxss: false