Scenarios should be named after the security tool name and their specific Scenario Configuration.
For example, Fortify on Demand has two product types offered that ZeroNorth supports and the Scenario name should reflect that.
- Scenario name: fortifyondemand-sast OR fortifyondemand-dast
The Scenario name for Fortify on Demand should not simply be “fortifyondemand” since it can cause confusion in a later set up step.
For example, NMap has many Scenario Configurations and so each separate Scenario should not be named “nmap” but rather “nmap-” (i.e. “nmap-exploit”, “nmap-vuln”, “nmap-host-port-discovery”, etc.)