Skip to main content

Reports

The Reports interface provides comprehensive insights into your Santa deployment, helping administrators understand security posture, rule effectiveness, and system health across the organization.

Overview​

The Reports dashboard offers several analytical views:

  • Top Blockables: Most frequently blocked binaries across your organization
  • Dangerous Entitlements: Binaries with potentially dangerous entitlements
  • Ready for Lockdown: Analysis of hosts that may be ready to transition to Lockdown mode

Top Blockables​

The Top Blockables report displays the most frequently blocked binaries across your organization:

  • Filename: Name of the blocked binary
  • Signing ID: The signing identifier of the binary
  • CDHash: The CodeDirectory hash of the binary
  • Entitlements: Any entitlements associated with the binary
  • Count: Number of times the binary has been blocked

This report helps identify patterns of blocked applications and potential security risks.

Dangerous Entitlements​

The Dangerous Entitlements report highlights binaries that contain potentially risky entitlements:

  • Displays binaries with entitlements that could pose security risks - Provides detailed information about each entitlement - Helps identify applications that may require additional scrutiny

Ready for Lockdown​

TODO