
$report = "full";

$data_dir = "saint-data";
$exclusions_file = "exclusions";

#
# Header
#

$report_title = "Assessment Report";
$logo = "off";
$show_title = "on";
$show_scan_time = "on";
$show_report_time = "on";

# Where to find the logo
$logo_path = "http://www.wwdsi.com/images/saint_logo.jpg";

#
# Charts
#

# Which charts to include

# Status of all vulnerabilities by severity level
$bar_vulnstatus = "off";
$table_vulnstatus = "off";
$vs_title = "Vulnerability Status by Severity";
# Whether to invert placement of status and severity
$vs_invert = "off";

# Vulnerabilities by severity level
$pie_vulns = "off";
$bar_vulns = "on";
$table_vulns = "on";
$v_title = "Vulnerabilities by Severity";

# Hosts by severity level
$pie_hosts = "off";
$bar_hosts = "on";
$table_hosts = "on";
$h_title = "Hosts by Severity";

# The number of hosts in each category
$pie_categories = "off";
$bar_categories = "on";
$table_categories = "on";
$c_title = "Hosts per Vulnerability Category";

# Vulnerabilities by severity and subnet
$bar_subvulns = "on";
$table_subvulns = "on";
$sv_title = "Vulnerabilities by Subnet";

# Hosts by severity and subnet
$bar_subhosts = "on";
$table_subhosts = "on";
$sh_title = "Hosts by Subnet";

# Hosts in each category by subnet
$bar_subcategories = "on";
$table_subcategories = "on";
$sc_title = "Hosts per Vulnerability Category by Subnet";

# Status of all vulnerabilities
$bar_allvulnstatus = "off";
$table_allvulnstatus = "off";
$avs_title = "Status of All Vulnerabilities";

# Status of current vulnerabilities
$pie_curvulnstatus = "off";
$bar_curvulnstatus = "off";
$table_curvulnstatus = "off";
$cvs_title = "Status of Current Vulnerabilities";

# Status of old vulnerabilities
$pie_lastvulnstatus = "off";
$bar_lastvulnstatus = "off";
$table_lastvulnstatus = "off";
$lvs_title = "Status of Old Vulnerabilities";

# Vulnerabilities by severity level and date
$bar_vulnhistory = "off";
$table_vulnhistory = "off";
$vh_title = "Vulnerability History";

# Hosts by severity level and date
$bar_hosthistory = "off";
$table_hosthistory = "off";
$hh_title = "Host History";

# Vulnerability categories by severity level and date
$bar_cathistory = "off";
$table_cathistory = "off";
$ch_title = "History of Hosts by Category";

# Black and white output
$blackandwhite = "off";

# Labels for vulnerability charts
$redlabel = "critical problems";
$yellowlabel = "areas of concern";
$brownlabel = "potential problems";
$greenlabel = "services";

# Labels for host charts
$alllabel = "hosts detected";
$redhostlabel = "hosts with critical problems";
$yellowhostlabel = "hosts with areas of concern";
$brownhostlabel = "hosts with potential problems";
$greenhostlabel = "hosts with services only";
$blackhostlabel = "hosts with no services";

# Whether to place values beside bars in bar graphs
$bar_values = "on";

# Axis labels for history charts.
# 0=Month-Date-Year, 1=Month-Date, 2=Month-Year, 3=ordinal
# 4=dataset
$history_label = "0";

# In total status charts, whether to count only reds
# ("on"), all vulnerabilities ("off"), or only reds
# and yellows ("reverse")
$vulnstatus_redonly = "off";

# Whether to print a warning message about the variable
# above
$redonly_msg = "off";

#
# Lists
#

# which lists to include
$host_list = "on";
$vuln_list = "on";

# Host list title
$hl_title = "Host List";
# Vulnerability list title
$vl_title = "Vulnerability List";

# 0=none
# 1=hostname
# 2=nbname
# 3=ip
# 4=os
# 5=reds
# 6=yellows
# 7=browns
# 8=greens
# 9=top-10s
# 10=severity
# 11=text
# 12=category (tutorial name)
# 13=cve
# 14=topten
# 15=scan time
# 16=status
# 17=recurrences
# 18=current recurrences
# 19=status/severity cross-reference

# which columns to include in host list (1-9,15-19)
$host_list_10 = "0";
$host_list_11 = "0";
$host_list_12 = "0";
$host_list_13 = "0";
$host_list_14 = "0";
$host_list_1 = "1";
$host_list_2 = "2";
$host_list_3 = "3";
$host_list_4 = "4";
$host_list_5 = "5";
$host_list_6 = "6";
$host_list_7 = "7";
$host_list_8 = "8";
$host_list_9 = "9";

# which vulnerabilities to include in vulnerability
# list (1-4, 10-14, 16-18)
$vuln_list_10 = "0";
$vuln_list_11 = "0";
$vuln_list_12 = "0";
$vuln_list_1 = "1";
$vuln_list_2 = "2";
$vuln_list_3 = "3";
$vuln_list_4 = "4";
$vuln_list_5 = "10";
$vuln_list_6 = "11";
$vuln_list_7 = "12";
$vuln_list_8 = "13";
$vuln_list_9 = "14";

# which hosts to include in host list
$redhosts = "on";
$yellowhosts = "on";
$brownhosts = "on";
$greenhosts = "on";
$emptyhosts = "on";
$toptenhosts = "off";

# merge table cells where possible
$merge_cells = "on";

# show severities in vulnerability list as a number
# between 0 and 3 instead of a word
$numeric_severities = "off";

# make a separate line for each CVE number
$separate_cves = "on";

# include hosts with no vulnerabilities in 
# vulnerability list
$no_vulnerabilities = "on";
$no_vulnerabilities_text = "nothing to report";

# Which status categories to cross-reference with
# severity categories in host list
$cross_new = "on";
$cross_removed = "on";
$cross_existing = "on";
$cross_reintro = "on";

# Which severity categories to cross-reference with
# status categories in host list
$cross_red = "on";
$cross_yellow = "on";
$cross_brown = "on";
$cross_green = "off";

#
# Technical Details
#

# Whether to include technical details (tutorials)
# ("reverse" = tutorials in appendix)
$tech_details = "on";

# whether to include hosts with no vulnerabilities
# in details section
$empty_host_details = "on";

# whether to repeat host information for each
# vulnerability
$host_info_always = "off";

# which sections of tutorial to include
$entire_tutorial = "off";
$impact = "on";
$background = "off";
$problem = "off";
$resolution = "on";
$references = "on";

# Whether to include host and vulnerability status
# information with technical details
$host_detail_status = "off";
$vuln_detail_status = "off";

#
# Vulnerabilities
#

# which vulnerabilities to include
$allreds = "on";
$allyellows = "on";
$allbrowns = "on";
$allgreens = "off";
$alltoptens = "off";

# The next section allows you to include specific
# vulnerability categories, without necessarily
# including the whole severity level
# ex. $red_http_cgi_access = "on"

# Begin vulnerabilities (do not remove this line)
# End vulnerabilities (do not remove this line)

# Whether to exclude ignored vulnerabilities
$use_exclusions = "on";

# Which vulnerability status categories to include in
# vulnerability list and technical details. (Does not
# affect total counts.)
# (New, Removed, Existing, or Re-Introduced)
$show_nvulns = "on";
$show_rvulns = "on";
$show_evulns = "on";
$show_rivulns = "on";

#
# Hosts
#

# ("reverse" for any of these inverts the match
# condition)

# Filter by host/domain name
$matchdomain = "off";
$domains = "";

# Filter by IP address
$matchip = "off";
$ipaddresses = "";

# Filter by host type
$matchos = "off";
$hosttypes = "";

# Which host status categories to include in host list
# and technical details. (Does not affect total counts.)
# (New, Removed, Existing, or Re-Introduced)
$show_nhosts = "on";
$show_rhosts = "on";
$show_ehosts = "on";
$show_rihosts = "on";

#
# Sorting
#

# 1=hostname
# 2=nbname
# 3=ip or subnet name
# 4=os
# 5=vulnerability count by severity
# 6=top-10s
# 7=hosts
# 8=host count by severity

# host sort keys (1-6)
$host_sortkey1 = "3";
$host_sortkey2 = "1";
$host_sortkey3 = "2";

# subnet sort keys (3,5,7,8)
$subnet_sortkey1 = "3";
$subnet_sortkey2 = "7";
$subnet_sortkey3 = "8";

# sort categories by the number of hosts in
# the category (instead of alphabetically)
$cat_sort_count = "off";

# whether to sort backwards
$invert_host_sort = "off";
$invert_subnet_sort = "off";

#
# Format
#

# 0=html 1=text  2=tab-separated  3=comma-separated
$format = "0";

#
# Trend analysis options
#

# Data directories to use for trend analysis
# Begin data sets (do not remove this line)
# End data sets (do not remove this line)

# show all removed vulnerabilities, instead of just ones
# removed in current scan
$show_all_removed = "on";

# Whether to classify reintroduced vulnerabilities as new
# or treat as separate category. ("reverse" = classify
# as existing instead)
$reintro_new = "off";

# Whether to ignore the fact that a host is missing from
# a scan set. If "off", a missing host will be classified
# as "removed" (or "reintroduced" if it comes back).
$ignore_missing = "off";

# Labels for status categories
$new_text = "new";
$removed_text = "removed";
$existing_text = "pre-existing";
$reintro_text = "reintroduced";
$remaining_text = "remaining";

#
# Other Options
#

# short severities:
# on = red, yellow, etc.
# off = Critical Problems, Areas of Concern, etc.
$short_severities = "off";

# whether to count all hosts, even if some
# are filtered out of the report
$countall = "off";

# If any of the vulnerability categories appear under more
# than one severity level, treat them as the same category.
# For example, if "FTP vulnerabilities" appears under both
# red and brown, and either one is selected, then include
# all FTP vulnerabilities and group all FTP vulnerabilities
# together in the category table.
$combine_categories = "off";

# Show reference URLs instead of hyperlinks in HTML tutorials
$show_url = "off";

# whether to export results to RiskWatch
$riskwatch = "off";

1;
