Emulation History of an Endpoint

It is possible to review the history of emulations carried out on each of the endpoints registered on the platform. To view the emulation history of an endpoint, follow these steps:

1. Click on the icon from the Historic Emulation column.
2. A new view with details of the selected endpoint's emulations will be displayed.

Emulation History Dashboard

Historic Emulation Results Dashboard

Displays basic information such as:

• Host Name: Shows the full name of the endpoint at the top right.

• Count of Emulations: Number of emulations performed on this endpoint.

• Artifact Execution Results: Provides a percentage of successful artifact executions and a percentage of unsuccessful ones.

• Network Security Evasions: Provides a success rate for not bypassing network security and the percentage of attempts that did not bypass the network.

Prior 10 Emulations Diagram

Displays the last 10 emulations performed on the host in a graphical format with the following information:

• General Graphic: Shows the information in a pie chart.

• Node Details: Displays the host, emulations, and package categorization represented by colors.

• File Challenge Levels: Shows the threat level of each artifact represented by colors.

Clicking on the circles displays graphically the relationships between emulations, packages, and artifacts.

Emulations relationships

Report Table

Displays a report of the emulations performed on the host with the following information:

• Emulation: Displays the name of the emulations.

• Package: Displays the name of the package sent within the run.

• Success: Shows the number of successfully executed artifacts.

• Fail: Shows the number of artifacts that failed to execute.

• Qualification: Shows the overall result of the emulation, indicating if it was failed, satisfactory, or partially satisfactory:

  • Failed: All or most artifacts were not executed.

  • Satisfactory: All or most artifacts were executed.

  • Partially Satisfactory: More artifacts were executed than failed.

• Date: Shows the date and time the emulation was performed on the host.

Report Table

Download Report

Download a report of emulations performed on the selected endpoint in Excel format. To download the report, follow these steps:

1. Click on the button.
2. Select the path on the local host to save the report.

3. Click "Save" to download the report in .xlsx format.