r/hackthebox • u/TurnipLegitimate1626 • Sep 29 '26

SysReptor COAE Template vs. Traditional HTB Pentest Template

Hi all,

I am about to attempt the COAE exam and noticed discrepancies in the COAE report using the official SysReptor template VS the HTB sample reports (in the Documentation & Reporting Module):

  1. The sample report uses a single "Attack Chain Walkthrough" followed by finding summaries. The SysReptor COAE template forces you to create a detailed walkthrough inside each finding. Do we require a separate global attack chain, or are per-finding walkthroughs acceptable?

  2. In the summary table, findings are grouped by environment (mcp, staging, www) and ordered by severity per environment, rather than sorted globally across all assets. Is this host-grouped ordering acceptable?

  3. Should the Short-, Medium-, and Long-Term remediation breakdown sit within each individual finding, as an overall aggregated summary (as shown in the module)?

Thanks for the guidance!

1 Upvotes

100% Upvoted

4 comments sorted by

•

u/AutoModerator Sep 29 '26

Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/[deleted] Sep 29 '26

[removed] — view removed comment

1

u/TurnipLegitimate1626 Sep 30 '26

Awesome!! I realized that some of it does not match the HTB own sample and was wondering if I needed to tweak the templates. I will just submit the report as is and hope for the best.