Report Chapters

The reports consist of chapters that you can modify. The chapters can be set up in the Flowmon ADS module (Event matrix, Events by priority, Events by type) or in the Flowmon Dashboards and Reports (MITRE ATT&CK). The management of reports is performed in the Flowmon Dashboards and Reports section. The following types of chapters are available:

Event matrix

This chapter contains a table of occurrences of the most severe events in the network. The events are displayed for individual days and devices.

Events by priority

List of the most important events in the network. It is displayed as in the Events → Simple list view.

Events by type

List and the pie chart of the number of the most important events in the network.

MITRE ATT&CK

This chapter contains the list of events with selected MITRE ATT&CK tactics assigned. By default, the tactic is set to Reconnaissance. This can be changed in the settings of the report chapter.

The respective chapter is created by configuring the chapter using the respective values. It is possible to create more chapters of the same type, but with different settings. Only the admin user can create, modify and delete the chapters. If the deleted chapter belongs to some report, the user is warned before deletion. If the deleted chapter is the last one in the report, the user is warned and the report is eventually deleted.