# Working with assets

An asset is something owned by your organization where a vulnerability (finding) could be found, such as a on a web server, a source code file, or an IP address.

Every finding in the NetSPI Platform is associated with an asset. Assets are created automatically when importing finding data.

The Assets page displays all of your organization's assets on the All Assets tab, combining PTaaS, EASM, and CAASM-discovered assets when you are subscribed to all three modules.

Assets page
Assets page

# Accessing assets

  1. From the top menu, select Assets, and then All Assets, PTaaS Assets, EASM Assets, or CAASM Assets.

    Assets top access

    This displays the Asset Inventory page for your organization, with the All Assets tab and IP Addresses asset type as the default display.

    Each module displays a different set of asset cards and covers different asset types, some that overlap the others. For details on each module's Assets page, see:

  2. Use the image and table below as a beginning reference for actions you can take to customize and view your organization’s asset data in a way that suits you.

    Assets table

Callout Functionality Description
1 Asset source view: Choose to view all assets across all modules, or only those assets discovered by EASM, PTaaS, or CAASM.
2 Asset Cards: Select any Asset card to filter the assets that display in the Assets table to match your selection. Each card displays the total number of assets, those assets with or without open findings and those assets that have entry points. The Asset card data and labels change to match the asset type selected from the asset type buttons to the left of the asset table.
3 Asset Selector: Select a specific asset type to display all assets for that asset type in the asset table and the summary count for that asset at the top of the page.
4

Search / Filter / Table Display

Search: Enter a search term and hit Enter to filter the assets table to display only those assets that match the search criteria.

Filter: Select the Filter icon to create, save, and apply a custom filter to the assets that display in the asset table. Active filters display above the assets table header row and may be easily dismissed.

Table Display: Select the Column icon to display a dialog box where you can select which columns you want to display in the asset table.

Note: Including the Discovery Source column in the Assets table will display one of the four following asset discovery sources (if available): PTaaS, AWS, Qualys, and Manual. The NetSPI Platform provides integrations with your AWS and Qualys accounts. See the PTaaS Integrations instructions for details for implementation.
5

Asset Table: This is where all your assets are displayed for the selected asset type.

From here you can:

  • Select row checkboxes for bulk actions.
  • Select an individual row to display that asset's details summary on the page's left side.
Asset details summary
6 Select the Details icon Asset details icon to display the Asset details page for the selected asset in a full page display.

Asset details page

The Related Assets tab displays assets related to the selected asset.

See the Asset Details page section below for more information.

# Filtering assets

There are three ways to filter assets on the Asset Inventory page:

  • Using the top-level asset cards
  • Using the asset table's Filter icon
  • Using the left-navigation fast filter for filtering domain assets

# Filtering assets using the top-level asset cards

The top row of the Assets page displays cards for assets assocIated with IP addresses, open findings, without open findings, and with entry points. Note that the IP Addresses card name and count change based on the asset type you select from the asset buttons to the left of the Assets table.

Assets Active Filters
Assets Active Filters

  1. Select each of the Assets cards to filter the Assets table for that category. The Active Filters row displays at the top of the table for each selected card so that you can see which asset criteria is included/excluded in the filtered list.

  2. Select the Clear All link in the Active Filters field to remove all filter criteria.

To perform a custom filter use the following steps:

  1. Select the Filter icon to display the Saved Filters/Filters dialog box.

    Assets Filters dialog box

  2. Select the Filters tab to display the freeform filter fields where you can select values and logic to build your own filter.

    Assets Freeform Filter

  3. Select the Apply Filters button to display the Asset table with values that meet your applied filter criteria.

# Filtering the Assets table using the Filter icon

See Apply a new filter in the Navigation section of this guide.

# Filtering domain assets with the fast filter

The fast filter functionality is located in the side navigation when you select Domain. It provides a quick way to filter on items that are likely to be the most important to you for all modules.

Domain fast filter example
Domain fast filter example

To apply the fast filter, select checkboxes for as many of the fast filter criteria as you need, scrolling down to view more items. As you select or clear checkboxes, the table dynamically changes to display domain results matching your selections.

Use the image and text below for more details on the Domain page fast filter functions.

Domain page fast filter
Domain page fast filter

  1. There are multiple fast filters for different aspects of the Domain page (Subdomains, CVE, etc.).

    The Domain page's fast filter items include:

    • Subdomains
    • CVE
    • Product
    • IP Address
    • Country
    • Services
  2. A sort icon toggles from highest to lowest count and back for each fast filter option.

  3. Checkboxes filter the table to the right, displaying all records that match the selected criteria.

  4. A total count displays for each fast filter option.

# Searching assets

Use the following steps to search assets.

  1. Enter search criteria in the Search Assets field.

    Assets Search Field

  2. Select the asset type you want to search for from the asset buttons to the left of the table.

  3. Press Enter to perform the search and see the results.

    Applied Assets Search Results

  4. Select the 'X' next to your search text or at the far right of the search field to clear the results and return to the default table display.

See also Search, Sort, and Filter Tables

# Configure the assets table display

Configure the columns that display in the Assets table by selecting the Table icon and selecting or clearing checkboxes for columns you want to display/hide.

Assets Table Column Config
Assets Table Column Config

See also Search, Sort, and Filter Tables

# Sorting the assets table

Use the following steps to sort the findings table based on a single column.

  1. Select any table column header to sort the Asset data by the selected column.

    Assests table column config

  2. Select the table column header again to toggle the data for that column from ascending to descending and back again.

# Asset Details page

Use the steps below to display the details page for any asset in the Asset table.

  1. Select the Details icon Details icon at the far right of any row to display the Asset details page for the selected asset in a full page display with the Overview tab in focus.

    Asset details full page access

    Note: If you select anywhere in an asset table row, a condensed view of that asset's details displays in a side panel to the right. You can also select the Details icon here to move from the condensed view to the full page view as displayed above.

    Asset Details Side Panel

    The top of the Asset details page displays the asset’s name followed by tabbed menu links beneath it with the Overview tab in focus.

  2. Use the sections below to help you navigate the Asset details page's tabs.

# Tabs on the Asset Details page

This section provides information on each of tabs in the Asset details view for any asset. The default initial display when select the Asset details icon is the Overview tab with the selected asset's category/name displayed as a view-only title at the top of the page.

Note that some modules include some fields and tabs that are unique to that module and not the others. For example, EASM-discovered assets include a Live Timeline display on the overview tab. PTaaS-discovered assets include an Engagement's tab and CAASM-discovered assets include an Integrations tab.

# Overview tab

The Overview tab displays high-level information about the selected asset and includes links that allow you to examine items in more detail, such as selecting the Ports card, which puts the Ports tab in focus where you'll see information such as protocol, CVEs, and IP address, etc.

Asset details Overview tab

Use the image above and the corresponding table with callouts below for more details on the Overview tab's functions.

Callout Functionality Description
1

The top row of the Asset details page displays the asset’s name followed by tabbed menu links beneath it. Select the tabs to display details related to the selected asset:

  • An overview of the asset, similar assets to the one selected, findings, ports, certificates, products, and engagements the asset is associated with
  • An activity log for the asset’s lifecycle where you can see every person and stage the asset has passed through
  • Comments from NetSPI or your organization on the asset
  • A graphic illustrating the asset's lineage

Note: If an asset spans more than one engagement for your organization, any comments on the asset stick with that asset, and will display even if you view the same asset within the context of a different engagement.

Note: Select the back arrow next to the page title to return to the main Assets page.
2 The left field group displays the asset's name, any tags applied to the asset, the method by which the asset was discovered, when the asset was created in the NetSPI Platform, the name of the NetSPI Agent who created the asset record, and modification dates.
3 The Open Findings field group displays any open findings associated with the asset.
4 The four cards display the number of associated engagements, domains, and ports associated with the asset, and when selected, display those associated entities for the asset.
5 Recent comments includes comments from both NetSPI staff or NetSPI Platform users from your organization.
6 The Details field group displays all available details about the asset, including the discovery source.

# Related Assets tab

The Related Assets tab displays a table of other assets related to the one selected.

Related Assets tab
Related Assets tab

# Findings tab

The Findings tab displays a table of findings associated with the selected asset.

Findings tab
Findings tab

# Ports tab

The Port tab displays information about ports related to the selected asset.

Ports
Ports

# Certificates tab

The Certificates tab displays a table of certificates related to the selected asset.

Certificates
Certificates

# Products tab

The Products tab displays a table of products related to the selected asset.

Products
Products

# Engagements tab

The Engagements tab appears for PTaaS-discovered assets and displays all or your organization’s engagements that contain the selected asset. Selecting a row will take you to the Engagement Details page for the selected engagement.

Asset-related Engagements
Asset-related Engagements

# Activity tab

The Activity tab displays a historical log of activity related to the asset.

Asset activity
Asset activity

# Comments tab

The Comments tab displays a table of comments made by NetSPI staff or your organization's NetSPI Platform users for the asset.

Comments tab
Comments tab

# Integrations tab

The Integrations tab appears for CAASM-discovered assets and displays information about all of your CAASM integrations that have identified this asset along with a Raw Data section outlining what kind of data is being brought in.

Integrations tab
Integrations tab

# Asset Linage tab

The Asset lineage tab displays an interactive visual representation of assets related to the one you selected. You can expand and add more information as needed.

Asset Lineage
Asset Lineage

Note that the nodes and edges, along with asset types represented, appear in text in the upper left of the asset lineage display.

  1. Click and drag the components of the asset lineage graphic to change its display.

  2. Hover over an element to display instructions to double-click it. Doing so displays the details for that asset.

    Asset lineage details

  3. Single-click an element of the asset lineage to see its expanded list of associated assets.

    Asset lineage expanded asset lineage

# Social engineering assets

Social engineering assets included in the assets list are those assets that could lend themselves to vulnerability for the purposes of deception.

Social engineering asset Default information displayed*
Location Name, location zone, country, city, and state
Person First name, last name, job title, and parent person (record)
Physical Component Name, physical component type (e.g., alarm, camera, etc.), ID, parent company, and zone
Policy Name, policy type, policy subtype, policy category, and parent company