View and download Script Emulation Logs
The user can download a Script Emulation Logs (results) in this section. This log has what the script performed. It is important to emphasize that the Script should have a result on the console. This result is what is presented on the logs.
To download all the Logs of an Emulation, follow these steps:
In the Custom Threat Validation Table, emulations view click on the "Report” button corresponding to the desired Emulation in the Reports column.
Click on the button found in the section “Download All Logs.”
The Platform will generate a .zip file with all the logs in the emulation. Save this .zip file.
To download the Logs of all Scripts Emulation on a specific endpoint , follow these steps:
In the Custom Threat Validation Table, emulations view click on the "Report" button corresponding to the desired Emulation in the Reports column.
Click on the “Endpoint Logs in Zip” button at the right side of the endpoint’s name on the Endpoints Scripts Emulation.
The Platform will generate a .zip file with all the logs in the emulation. Save this .zip file.
To download the Logs of a specific Script Emulation, follow these steps:
In the Custom Threat Validation Table, emulations view click on the "Report" button corresponding to the desired Emulation in the Reports column.
Click on the
button in the Actions Column of the Script used in the emulation in the Endpoints Scripts Emulation Section. The Platform will generate a .zip file with all the logs in the emulation. Save this .zip file.
To View the Logs of a specific Script Emulation, follow these steps:
In the Custom Threat Validation Table, emulations view click on the "Report" button corresponding to the desired Emulation in the Reports column.
Click on the
button in the Actions Column of the Script used in the emulation in the Endpoints Scripts Emulation section. A window will appear with the log of the emulation. By default, is presented:
Script Name
Hostname
Output (logs) If the script failed, some information will be presented here. This is related to the Language interpreter not EVE.
Last updated