These types of reports are usually generated from a SIEM (Security Information and Event Management) or a vulnerability management platform.