Collection Health Summary Report
The Collection Summary report provides a window into the health of selected Collections.
You can schedule, run, and view report history using the Reports menu.
The Collection Health Summary report displays top-level metrics such as the count of critical/elevated Collections and risk categories represented in each Collection.
Severity and Risk Categories
A Collection becomes elevated or critical (TIC score ranging from 50-100) when threats are associated with Elements in the Collection. Each threat association falls into one of twelve risk categories.
Compare the health of selected Collections by viewing the number of threats associations in each risk category via the Risk Category table.
Running the Collection Health Summary Report Manually
1. From the menu bar, click Reports.
2. From the left-hand navigation, select Run Report. The Run Report screen appears with any recent Reports, if any exist.
3. Select Collection Health Summary from the Select a report type drop-down menu.
4. Select one of the following options under Select collections to include in this report:
Collections by TIC - Includes collections by TIC in descending order.
Collections by Threat Association Count -Includes collections in descending order by threat association count.
Assigned - Includes collections assigned to the current user in TIC descending order.
Custom - Choose specific collections from this workspace.
5. Under Collection Severity, check the Only Include critical and elevated collections option to limit the report to collections that have Critical or Elevated status.
The report is limited to 250 Collections.
6. Click the RUN REPORT button to run the report. A PDF of the report will be generated for review and download.
Association Daily Activity Report (formerly "Threat Association Daily Activity")
The Associations Daily Activity report is a detailed log of added and removed threat associations occurring in 24 hours.
You can use this as a baseline data source to review significant threats to your system. You can schedule, run, and view report history using the Reports menu. The Association Daily Activity report is generated as a comma-separated values (CSV) file that you can view using any spreadsheet or other appropriate application.
The report has the following fields:
ASN: The autonomous system number (ASN) for the IP address
Collection: The Collection to which the threat association belongs
ASN Owner: The owner of the ASN
CIDRv4/CIDRv6: The classless inter-domain routing (CIDR) number
CIDR Owner: The owner of the CIDR
Element: The Element number
Type: Possible values are IPv4/IPV6, FQDN, or CIDRv4/CIDRv6
Status Change: Possible values are Active or Inactive
Latitude: The latitude of the threat
Longitude: The longitude of the threat
Threat: The Threat description
Running the Association Daily Activity Report Manually
1. From the navigation, click Reports.
2. From the left-hand navigation, select Run Report.
3. Select Association Daily Activity from the Select a report type drop-down menu.
4. Select one of the following options under Select collections to include in this report:
All - Includes all collections in this workspace.
Assigned - Includes collections assigned to the current user.
Custom - Choose specific collections from this workspace.
6. Chose from the following options under Select association types to include in the report:
All - Includes all Threats and vulnerabilities
Threats - Include only Threats
Vulnerabilities - include only Vulnerabilities
5. Click the Run Report button to generate the report. Then, click OK on the confirmation window to have the report emailed to you.
Scheduling to Run Automatically
You can use Schedule Reports to run Threat Association Daily Activity Reports automatically at regular intervals.
Collection Scorecard Report
The Collection Scorecard report provides detailed information about a single specified collection based on several key risk categories.
Running the Collection Scorecard Report Manually
1. From the navigation, click Reports.
2. From the left-hand navigation, select Run Report.
3. Select Collection Scorecard from the Select a report type drop-down menu.
4. Select the collection that you want to appear in the report from the Select Collection drop-down menu.
5. Click the Run Report button. You will be prompted to download the report in PDF form.
Scheduling to Run Automatically
You can use Schedule Reports to run Collection Scorecard Reports automatically at regular intervals.
Related Content