Aggregate passed exploit attempts tests (which means failed exploiting)

monkey/monkey_island/cc/services/telemetry/zero_trust_tests/machine_exploited.py

@@ -34,11 +34,19 @@ def test_machine_exploited(telemetry_json):
         )
         status = STATUS_FAILED
 
-    Finding.save_finding(
-        test=TEST_MACHINE_EXPLOITED,
-        status=status,
-        events=events
-    )
+    # aggregate only passed tests (which means exploit failed). Each successful exploit gets its own finding. 
+    if status == STATUS_FAILED:
+        Finding.save_finding(
+            test=TEST_MACHINE_EXPLOITED,
+            status=status,
+            events=events
+        )
+    else:
+        AggregateFinding.create_or_add_to_existing(
+            test=TEST_MACHINE_EXPLOITED,
+            status=status,
+            events=events
+        )
 
     AggregateFinding.create_or_add_to_existing(
         test=TEST_MALICIOUS_ACTIVITY_TIMELINE,