Activity

Activity is the operational view for scans and scheduled work. Use it while a scan is running and when investigating what happened after a scan finishes.

Activity Page

Open Activity -> Activity.

Use this page to check:

• module type, such as External Attack Phase, Internal Attack Phase, External Discovery Phase, Internal Discovery Phase, Calibration Phase, Retesting, or Pre-Flight Test;

• module status;

• start and end time;

• root target;

• progress through submodules;

• failure or cancellation state.

Click a module row to open the activity detail page for that module.

Activity Detail

The detail page is the first place to inspect a scan that is slow, failed, cancelled, or producing unexpected results.

Check:

• which submodules ran;

• which submodules are pending, running, completed, failed, or cancelled;

• when each stage started and ended;

• whether failures are isolated or repeated;

• whether a max runtime limit cancelled remaining work.

Attack Logs

Open Activity -> Attack Logs for lower-level event logs.

Use logs when the module-level view is not enough, for example:

• agent disconnected;

• browser session failed;

• target blocked scanner traffic;

• rate-limit calibration failed;

• submodule timed out;

• RabbitMQ or worker pickup was delayed;

• internal agent could not reach a host or subnet.

Logging

Schedules

Open Activity -> Schedule to view and delete one-time or recurring schedules.

Scheduling