Emulation History of an Endpoint

It is possible to review the history of emulations carried out on each of the endpoints registered on the platform. To view the emulation history of an endpoint, follow these steps:

  1. Click on the icon from the Historic Emulation column.

  2. A new view with details of the selected endpoint's emulations will be displayed.

Emulation History Dashboard

Historic Emulation Results Dashboard

Displays basic information such as:

  • Host Name: shows the full name of the EndPoint at the top right.

  • Count of Emulations: number of emulations that have been made this EndPoint.

  • Artifact Execution Results: It gives a percentage of successful artifacts that were executed and a percentage of unsuccessful artifacts.

  • Network Security Evasions: It gives a success rate for not bypassing network security and the percentage of not bypassing the network.

Prior 10 Emulations Diagram

Displays the last 10 emulations performed on the host in a graphical format with the following information:

  • General Graphic: Shows the information in a pie chart.

  • Node Details: Displays the host, emulations, and package categorization represented by colors.

  • File Challenge Levels: Shows the threat level of each artifact represented by colors.

Clicking on the circles displays graphically the relationships between emulations, packages, and artifacts.

Emulations relationships

Report Table

Displays a report of the emulations performed on the host with the following information:

  • Displays a report of the Emulations that have been performed on the host with the following information.

  • Emulation: Displays the name of the Emulations that have been made.

  • Package: Displays the name of the package that was sent within the run.

  • Success: Shows the number of artifacts that were successfully executed.

  • Fail: Shows the number of artifacts that were not executed and were failures.

  • Qualification: shows the result of the total emulation if it has failed, satisfactory or partially satisfactory.

    • Failed: All or most of the artifacts were not executed.

    • Satisfactory: All or most of the artifacts were executed.

    • Partially Satisfactory: There were more executed artifacts than failed ones.

    Date: shows the date and time that the emulation was made on the host.

Report Table

Download Report

Download a report of Emulations performed on the selected EndPoint in Excel format.

  1. Click on the button.

  2. Select the path on the local host to save the report.

  3. Click "Save" to download the report in .xlsx format.

Last updated