Implement scan differential notifications with historical change tracking #32
Description
Add functionality to compare current scan results with previous scans and notify users of differences, including how long changes have been present historically.
Requirements:
- Compare current scan results with last successful scan
- Identify changes: new hosts, removed hosts, changed services/ports, new vulnerabilities
- Show historical timeline: when each change was first/last detected
- Provide notifications/alerts for significant changes
- Include differential summary in reports
Key Features:
- Change Detection: New/removed hosts, port changes, service changes, CVE changes
- Historical Context: 'First seen X days ago', 'Last seen Y days ago', 'Change persisted for Z days'
- Notification System: UI alerts for critical changes, email notifications (future)
- Differential Reports: Include change summaries in HTML/PDF reports
- Filtering: Focus on important changes (ignore minor port fluctuations)
Implementation Details:
- Store historical scan data in structured format for comparison
- Implement diff algorithm comparing scan results
- Add change detection logic in scan processing pipeline
- Create UI components for displaying changes with timestamps
- Integrate with existing scan metadata and reporting system
Use Cases:
- Network monitoring and change detection
- Security incident response (detect unauthorized devices)
- Compliance auditing (track network changes over time)
- Capacity planning (monitor network growth)
Location: Modify scan result processing in app.py, add comparison logic, update templates/index.html for change display, enhance report generation.
This feature will help users quickly identify network changes and understand how long changes have been present, improving network monitoring capabilities.