Accessing Attack Surface Management History

On the Reports tab, you can view ASM results of previous asset scans.

Note: If users with Org Admin privileges access the Reports tab for the first time, they must configure the settings first. Once the settings are configured, all generated reports for your organization will be displayed on the Attack Surface Management page under the Reports tab. Non admin-users will see a blank page until at least one report is generated. See Configuring Attack Surface Management Settings for details.

To access generated ASM reports, navigate to ThreatStream > Analyze > Attack Surface Management > Reports.

Filter Options: Reports are displayed based on the time they were created. You can choose to display reports created over the last 30 days, 60 days, 90 days, 6 months, 12 months, or a custom time range.

Report: Reports generated for your organization. Click a report to view the details. See Viewing Attack Surface Management Report Details for more information.

Domains: Number of discovered domains.

IPs: Number of discovered IP addresses.

CVEs: Number of discovered CVEs.

Open Ports: Number of discovered open ports.

Created: Date and time when an ASM report was created.

Table Settings: Select the columns you want to be displayed. By default, all columns—Report, Domains, IPs, CVEs, Open Ports, Created—are visible. Additionally, you can change the order of columns in the table by using the drag-and-drop functionality, specify the number of rows to be displayed per page, and enable/disable horizontal scrolling.

Number of issues identified in the latest report for the metrics that are not displayed as widgets. Red numbers indicate the upward trend, green numbers indicate the downward trend, and blue numbers indicate the stable trend of the reported issues.

Widgets displaying metric trends over the period of time selected in the Filter Options.

Settings: Select the metrics you want to be displayed as trending widgets. The following widgets are available for selection:

Attack Surface Grade: Displays an overall attack surface grade for the organization and metric trend over the period of time selected in the Filter Options. The widget is displayed by default. See Attack Surface Grade for details.

Note: If data is insufficient for generating a grade, the Attack Surface Grade widget displays a dash (-).

End of Life Software: Displays the End of Life Software metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of End of Life instances. The widget is displayed by default.
Unreachable Assets: Displays the Unreachable Assets metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of unreachable assets. The widget is displayed by default.
CVEs with Documented Exploits: Displays the CVEs with Documented Exploits metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of exploitable CVEs. The widget is displayed by default.
Total Internet Facing Entities: Displays the Internet Facing Entities metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of Internet facing entities.
Expired Certificates: Displays the Expired Certificates metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of expired certificates.
Total CVEs: Displays the CVEs metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of CVEs.
SSH Services: Displays the SSH Services metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of SSH services running.
Open Ports: Displays the Open Ports metric trend over the period of time selected in the Filter Options. Hover over the point of time on the trend line to see the date and number of open ports.

Export PDF: Export selected widgets to a PDF file. See Exporting Attack Surface Management Data for details.

From the Reports tab of the Attack Surface Management page, you can take the following actions:

Access asset inventory. See Viewing Asset Inventory for details.

Configure report settings. See Configuring Attack Surface Management Settings for details.
Access details of reports. See Viewing Attack Surface Management Report Details for more information.
Delete reports. See Deleting Reports for details.
Download reports in the HTML file format. See Downloading Reports for details.

To delete a report:

Note: You must have Org Admin privileges to delete ASM reports.

Navigate to ThreatStream > Analyze > Attack Surface Management.
Click the Reports tab.
Select the ASM report you want to delete.
Click Delete.

To download an ASM report in the HTML file format:

Navigate to ThreatStream > Analyze > Attack Surface Management.
Click the Reports tab.
Select the report you want to download.
Click Download.

Alternatively, you can download reports from report details pages. See Viewing Attack Surface Management Report Details for more information.