Anchor
_Toc148340569 _Toc148340569

Introduction

...

The GYTPOL Client operates on a daily basis for a brief duration. Within this operational window, it accumulates data related to misconfigurations, unattended zero-day vulnerabilities, and outdated third-party software. This information is collected during the run and subsequently processed for further analysis.

...

• Red (High): Represents high-severity misconfigurations that require immediate attention due to their critical impact on security.

• Orange (Medium): Indicates medium-severity misconfigurations that should be addressed promptly to mitigate potential risks.

• Yellow (Low): Denotes low-severity misconfigurations that may not pose an immediate threat but should still be resolved to enhance overall security posture.

• Green (Complied): Signifies items that are in compliance and meet the expected security standards, resulting in no alerts generated.

...

In GYTPOL, alerts are visually differentiated by the presence of a spanner icon, which conveys specific information about the remediation process:

• Green Spanner: Alerts accompanied by a green spanner icon indicate that you can swiftly remediate the finding using the GYTPOL user interface. This streamlined process enables you to fix the identified misconfiguration in a matter of seconds. For more detailed guidance on the remediation process, refer to the provided resources.

• Gray Spanner: If an alert is associated with a gray spanner icon, it signifies that the finding cannot be remediated through the user interface due to certain limitations or conditions. These limitations could include factors such as unsupported PowerShell versions or informational nature of the alert. This may also indicate that the item fully complied with GYTPOL standards or was already fixed.

...

Accessible from the homepage, you can access the corresponding dashboard by selecting the relevant standard. Once clicked, the CIS or NIST dashboard will be displayed, presenting the benchmark results. Here's a breakdown of the color codes used:

• Green: Indicates that the settings within your organization are compliant.

• Red: Denotes that the settings within your organization are not compliant.

• Orange: Indicates that the settings are not managed in your organization, and there is no detectable Group Policy Object (GPO) containing the relevant setting.

...

Devices that are missing from reporting are color-coded as follows:

• Blue: Devices reported within the last 24 hours.

• Yellow: Devices that have not reported in the last 3 days.

• Orange: Devices that have not reported in the last week.

• Red: Devices that have not reported in 7-14 days.

...