- 27 Mar 2024
- 2 Minutes to read
-
Print
-
DarkLight
Reports Overview
- Updated on 27 Mar 2024
- 2 Minutes to read
-
Print
-
DarkLight
ThreatConnect® includes a built-in reporting feature that allows you to collect and organize valuable information and insights about Groups and Cases in a document that you can share with teammates, executives, and stakeholders. Unlike a Report Group, which is a Group object corresponding to a file uploaded to ThreatConnect, a report is a customized document that can contain any of the following components:
- Details about one or more Groups, including each Group's name, type, owner, creation date, last modified date, Security Labels, and Tags
- Details about one or more Cases, including each Case’s status, resolution, severity, Time of Occurrence, Time of Detection, Open Time, Close Time, description, and Tags
- Summaries of one or more Attributes added to a Group or Case
- Tables displaying objects associated to a Group or Case
- Visual elements, such as saved Group or Case graphs from Threat Graph and images
- Query-based charts and tables, metric charts, and pre-configured tables
- Text blocks that support rich text formatting, code blocks, and inline images
- Page layout elements, such headers, footers, page breaks, and horizontal rules
After building out a report, you can save it so that you and other users in your Organization can view it on the Custom Reports tab of the Reporting screen. You can also export the report as a PDF or HTML file that will be downloaded onto your computer and create a Report Group that includes the report as a PDF or HTML file attachment.
In addition to reports, you can create report templates that standardize the report creation process for users. Report templates can include content blocks with preconfigured text or visual elements, such as charts, images, tables, and saved graphs from Threat Graph, or placeholder sections that users can fill in after they create a report from the template. Saved report templates are available on the Templates tab of the Reporting screen, and users can leverage them when creating reports for Groups.
Before You Start
Minimum Role(s) |
|
---|---|
Prerequisites | The JS Report REST API Service enabled and activated (for using the PDF Preview feature within the Report Editor) |
ThreatConnect® is a registered trademark of ThreatConnect, Inc.
20144-01 v.03.A