Skip to main content

Reporting

Xylok comes with a few canned reports. These are generalized and should be useful for most systems. However, many systems have specific reporting requirements--contact Xylok about your needs and an individualized solution can be developed.

All reports can be accessed from the "Reports" tab of the Navigation pane:

Reports menu

Scan Comparison​

Accessed via Reports->Scan Comparison. There are a few options to select before generating this report. The first option reports on either:

  1. All changes between scans performed on the same machine or
  2. All changes between scans performed on all machines using the same Operating System.

The second and third options determine the date range to pull the data from.

Individual Findings​

Details can be found in the Individual Findings Report article.

CKLs and CKLs (with data)​

Accessed via Reports->Individual Findings, this report will download current scan results into “checklist” (.ckl) files. These checklists files are used by the DISA STIG Viewer and ingestible by other tools as an interchange format.

A .ckl file will be created for each machine and location under the client.

Hardware Spreadsheet​

Accessed via Reports->Hardware Spreadsheet, this produces an Excel spreadsheet that aggregates the metadata and details (Location, Names, Models, etc.) of all of the machines under a single Client.

Benchmark Status Report​

Accessed via Reports->Benchmark Status Report, this produces an Excel spreadsheet that displays the score for all machines, separated by Benchmark in order to give a full picture of which machines are scoring well or poor per Benchmark.

Ports, Protocols, Services Matrix​

Accessed via Reports-> Ports, Protocols, Services Matrix, this produces an Excel spreadsheet that lists for every machine all: Protocols, States, Local Addresses, Local Ports, Peer Addresses, Peer Ports, Processes, PIDs, and FDs. A second tab lists all ports in order and each associated protocol and service on that port. This can be useful for reporting that requires a full picture of the network and aims to automate some/most of that work.

note

Some machines may not be present in this report if scans have not been done on that machine or the necessary information was not found during scanning.