Automation rules

This walkthrough shows how to assign IP assets to an owner and email users when matching new IP assets are discovered.

In this guide, you will learn how to set up automation rules in Ostorlab. Automation rules help streamline common tasks like assigning assets to an owner.

Go to report.ostorlab.co

1. Click the menu button

2. Open Policies & Automation.

3. Open Automation Rules.

4. Click New Rule.

5. Select a context from the following list:

• Attack surface
• Inventory

• Remediation

  

6. Add a name to the rule.

7. In Target Filter, filter the items the rule applies to by asset type, owner, or a search term such as 203.0.113.

8. Select Action, which can be for instance auto assign-owners, set tags or send email notifications, in our case, we will assign an owner to the IP assets.

9. Select the owner.

10. Click the Add button beneath the action to include the action in the rule.

11. Then click Add at the bottom of the page to save the rule.

12. The rule now runs automatically, or you can run it manually with the play icon in the Actions column.

13. Automation rules can be useful; for instance, you can notify a user when a new asset is discovered.

1. Add a new rule and select Attack surface context
2. Give the rule a name, for example (Notify me when a new IP is discovered)
3. Filter the assets, for example with the search term 203.0.113
4. For the action select (Notify results)
5. Choose recipients in Notify Users and add the notification message. If no users are selected, all users are notified.
6. Click Add beneath the action to include it, then click Add at the bottom of the page to save the rule

This guide covered the process of setting up an automation rule that auto-assigns IP assets to an owner in Ostorlab.