SEK SystemsDocs Open console

Dashboard guide

Audit log and reports

Audit log

Audit log (under Evidence) lists everything that happened in your environment: sign-ins, plans, approvals, jobs and their results, policy changes, kill switch, settings, members and roles. Every role can read it; nobody can change it.

Column Meaning
# Sequence number within your environment.
When Time.
Actor Who did it: a member, an agent, or "SEK Systems support" when SEK Systems support acted in your environment.
Event What happened, for example plan.approve or auth.login.
Object What it happened to.
Details The relevant facts.
Hash The fingerprint of this record (hover for the previous record's hash).

Tamper-evident: every record carries the hash of the previous one, so the records form a chain per environment. Removing or changing a record breaks the chain from that point. The database also refuses changes and deletions of audit records. Use the Filter box to search.

Reports

Reports (under Evidence) has two parts.

At a glance

Tiles: Open risk, SLA compliance, MTTR (mean time to remediate) and Overdue now. Panels per risk class, SLA per class, MTTR, top open CVEs and per distro, each with a CSV button, plus Export CSV for everything.

Report for a period

Choose a period and all hosts or a group. The report shows:

  • open findings per day, new and fixed per week;
  • SLA per class (deadlines: KEV, act now, this week, planned) and MTTR per class and per operating system;
  • the oldest open KEV findings, exceptions that expire within 30 days, coverage;
  • Compliance evidence for NIS2, ISO 27001 and CIS Controls v8: per control the verdict and the records in SEK Systems that support it. Organisational measures outside SEK Systems are not judged.

Download it as PDF, CSV or JSON. The SLA terms and thresholds can be set per environment (SLA terms and thresholds, admin or owner); the report says when defaults are used.

Stored and signed reports

Stored reports keeps the weekly and monthly PDF reports that SEK Systems generates (if switched on), and the ones you store with Store this period as PDF (the last 60 files). Each stored PDF is signed by SEK Systems (Ed25519). Download the PDF and its .sig file.

Is this report genuine?

Someone sends you a SEK Systems report and you want to know it was not altered? Upload the PDF (and its .sig, if you have it) under Is this report genuine?. SEK Systems checks the signature and answers Genuine or Not genuine. Nothing is stored. For PDFs larger than 700 KiB, check offline with the public key that the panel shows.