🪲 Parse empty machines in Defender

[manuel-sommer]

You might not want to parse the machineinfo always due to fast changing environments, e.g. clients get new IP addresses every day. This puts a lot of uneccessary load onto DefectDojo.

[dryrunsecurity]

DryRun Security Summary

The PR modifies Microsoft Defender parser to handle empty machine directories, updates documentation with spelling corrections, and adds unit tests, though it removes some input validation checks.

Expand for full summary

The PR updates Microsoft Defender parser documentation and code, modifying parsing logic and adding a corresponding unit test to handle empty machine directories.

Security Findings:

1. Input Validation Reduction in dojo/tools/ms_defender/parser.py: Removing the check for "machines/" directory could potentially allow processing of zip files with incomplete or unexpected structures, slightly increasing risk of processing partial or unexpected data.

2. Spelling Error in documentation: Typo of "skipt" instead of "skipped" in docs/content/en/connecting_your_tools/parsers/file/ms_defender.md, which could cause user confusion.

Code Analysis

We ran 9 analyzers against 3 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[manuel-sommer]

Could we get this also on the road for the next release @mtesauro ?

[Maffooch]

I think this is a good move to keep asset management data out of the vulnerability management platforms to keep the mitigation process a little more streamlined. Great work!