In this article, you will find out how to use the XMCO bulletins database

SUMMARY

• Search and browse bulletins
• What can I do from the XMCO Database page?
• Bulletin details page

The XMCO database page contains all the bulletins written by XMCO since 2004.

From this page, you can search the Yuno knowledge base.

Search and browse bulletins

You can use the following filters to search through the bulletins:

• The Search filter allows you to search for keywords in the content of the bulletins.
• The Publisher filter allows you to display only the bulletins relating to a specific publisher. This is the list of publishers on the "technologies" page.
• The Product filter is used to display only the newsletters relating to a specific technology. This is the list of technologies on the "technologies" page.
• The Criticality filter is used to sort bulletins according to their criticality: no criticality, low, medium, high, critical.
• The Type filter is used to display only bulletins of one or more of the following types: INFO, XMCO (the 2 types of environmental bulletins), VULN, PATCH, EXPLOIT (the 3 types of technical bulletins).
• The Tags filter is used to filter bulletins based on the presence of one or more tags linked to the bulletins. Tags only apply to INFO and XMCO bulletins.
• It is also possible to query bulletins published over a defined Period ("from" and "to" selectors). The date is in DD/MM/YYYY format.
• The Perimeter filter gives you quick access to bulletins relating to one or more of the perimeters in which you are registered. By ticking All perimeters, we will display bulletins relating to all the perimeters in which you are registered.
• The Language filter is used to display bulletins that have: at least one English version, at least one French version or both versions.
• The "exclude Linux distributions" tick allows you to display your search by automatically excluding bulletins concerning Linux distributions or packages.

NB: Filters are cumulative (bulletins concerning product X and of high criticality). 

When the selector allows several values to be selected, these values are articulated around an OR operator (high criticality or critical bulletins).

Finally, click Apply to launch the search.

Use case: getting started with your XMCO perimeter

You're new to Yuno, and you've just created your first scope. However, to familiarise yourself with the solution and in particular with action ticket management, you don't want to wait for the publication of the first Yuno bulletin corresponding to your personalised environment (technologies, areas of interest, etc.). This may not arrive for a few days.

However, there may already be vulnerabilities in your Information System, vulnerabilities which have no doubt been the subject of a Yuno bulletin recently.

In this situation, you can consult the latest Yuno bulletins relevant to your scope and manually create your first action tickets in order to draw up a list of actions to be taken.

On the XMCO Database page, you can use the filters to compose your search using the various criteria available. You can search for the latest patches (PATCH bulletins) deemed important by XMCO (high and critical criticality) and published by the publisher of your solution (in this case MICROSOFT) during the past month.

Use the "perimeter" filter to keep the bulletins that meet the criteria of the technologies included in the selected scope.

Finally, once you've done your research, open the bulletins you think are important, then turn them into action tickets:

1. After opening the bulletin, click on the button at the top right of the bulletin
2. Select the area in which you want to add your action ticket
3. Finally, confirm the creation by clicking on the add button.

You can find the action tickets created in this way by consulting the "action plan" tab in your scope.

To do this:

1. Click on My perimeters in the Yuno menu
2. Select the scope you wish to access
3. Click on the Action Plan tab

What can I do from the XMCO Database page?

Once you have made your request, there are several possible actions:

Download the list of bulletins searched for in Excel so that you can process the data outside LePortail (1)

By clicking on the Excel button, you can download the list of all the bulletins generated by the query.

In the export, you will find for each bulletin:

• Publication date
• Identifier
• Criticality
• Type
• Its title (varies according to the language selected in the portal)
• Publisher (for a technical bulletin)
• Type of operation (for a technical bulletin)
• Potential damage (for a technical bulletin)
• Description (varies according to the language selected in the portal)
• XMCO's recommendation for action
• A workaround solution if available
• XMCO's expert opinion
• The product versions impacted and not impacted by the content of the bulletin (for a technical bulletin)
• The sources on which the bulletin is based
• Its CVE references
• The product(s) concerned (for a technical bulletin)    
• The platform(s) concerned

Download the pdf version of the newsletter (2)

Click on the pdf button to download the entire bulletin to your desktop.

Send the bulletin by email (3)

Click on the e-mail button to send the bulletin by e-mail to the recipient of your choice. You can add a message to the bulletin.

View a bulletin (4)

By clicking on the title of the bulletin, you will be redirected to the full content of the bulletin.

Bulletin details page

On this page you will find the full bulletin written by XMCO.

You can also take the following actions for the bulletin in question:

Download the PDF version of the bulletin (1)

Click on the pdf button to download the entire bulletin to your desktop.

Create an action ticket from this bulletin (2)

By clicking on the task icon, you can create an action ticket for one or more of your scopes.
From the drop-down menu in the pop-up window, select the scope(s) for which you want to create an action ticket.

Send the bulletin by email (3)

Click on the e-mail button to send the bulletin by e-mail to the recipient of your choice. You can add a message to the bulletin.