Cybersecurity
Recording Pentest Engagement
Package an engagement's findings, scan outputs, evidence, and signed ROE into a timestamped archive with a SHA-256 manifest covering supported, non-excluded regular files. Verifies an existing manifest without replacing it; integrity failures block signing and packaging. Optionally signs a new manifest with GPG. This supports evidence integrity but does not establish legal chain of custody, authorization, signature trust or compliance certification. Use when: closing an engagement, snapshotting evidence after each scan day, before handing artifacts to customer, or after an emergency-stop event. Threshold: file in tree without a manifest entry, hash mismatch, out-of-tree path referenced in findings, unsigned manifest when signing was requested. Trigger with: "record engagement", "archive evidence", "create chain of custody", "package pentest artifacts".
- Publisher / source
- jeremylongshore/tons-of-skills-marketplace (found on GitHub top repositories)
- Upstream record
- jeremylongshore/tons-of-skills-marketplace
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
8448d9133960743d50227f62355f15081e8d1db182a29e12b2022e574f85a4c6