Skip to main content
jfox
jfox
New Member
August 25, 2021
Question

Reporting

  • August 25, 2021
  • 2 replies
  • 3299 views

What is the consensus on EDR reporting? The executive summary is quite lacking and any other reporting is non-existent in the console. 

    2 replies

    nicerobot_FTNT
    Staff
    nicerobot_FTNT
    Staff
    August 25, 2021

    Did you see the option under the admin login name on the upper right side: Generate Reports? That has options for selecting dates, etc for reporting. You can export that output to pdf (Save/Print) option at the bottom. You might have to expand your window, I didn't see it the first few times I was in the EDR console.

    nicerobot_FTNT
    Staff
    nicerobot_FTNT
    Staff
    August 25, 2021

    I think I see what you mean. Sorry didn't see that you don't like the Executive Report. While you can export from the Events or Threat Hunting fields into CSV or PDF, it doesn't provide a nice graphic output.  What kind of information would be sufficient data in the reports? 

    jfox
    jfoxAuthor
    New Member
    August 26, 2021

    Not everything on the executive summary is bad. I'd like a way to report on or customize the executive summary to include 

    - Collector inventory with collector status, version, # of events, # of vulnerable applications. 

    - A top 10 collectors by event

    - A top 10 vulnerable applications 

     

    Really should have a reporting engine in this platform. A way for a MSSP or tenant to generate reports, schedule reports, customize reports, brand reports, etc. Probably the biggest GAP it has against competitiors. 

     

    Terms & ConditionsAccessibility statement