Good morning,
I'm trying to figure out a scenario that involves remediation task (grouping) rules, manual splitting and updates when new VITs come in.
A remediation team member reported that he split one of his (rule-generated) remediation tasks to isolate a specific vulnerability and a couple of days later new items (not matching) were automatically added to his new remediation task.
I'm now trying to understand how the system picks a remediation task when grouping:
1) Let's assume we have a remediation task rule
2) It generates a single remediation task "TaskA" for an assignment group
3) Remediation owner splits the remediation task and generates a "TaskB" with a subset of the items from "TaskA"
4) If a new VIT comes in that matches the definition of the rule from (1), where does the new item get added and how does the system choose the right task? Let's further assume state is "Open" for both of them.
The observation we made was that in our case we think that new items were added to "TaskB" which does not necessarily make sense especially because they did not match the criteria used for the manual split.
Bonus question: where can I find the code that does grouping?
Christoph
