Discover Assets

Discovering Assets

Asset discovery is a continuously running process to find new assets as they appear, and in this guide we will walk you through this process.

In the menu, open Attack Surface, then Discovery.

Select Discovered Assets to review the candidates.

Discovered Assets lists potential assets ordered by confidence: High, Moderate or Low. This reflects how likely each asset is to belong to your organization, based on your confirmed assets. Each asset also shows a potential owner.

The more assets are confirmed, the better the platform learns how an organization is structured and can make better recommendations.

How to confirm discovered assets

Confirming an asset records that it belongs to your organization and refines future discovery. Select the assets that belong to you and click Confirm; after you save, they move to Confirmed Assets.

In Confirm Asset, check the owner, then click Save. You can also set a location, environmental requirements, tags and notes. The assets move to Confirmed Assets.

How to exclude discovered assets

To exclude assets, select them, click Exclude and confirm. They leave the discovered assets list.

Discovered assets can also be excluded by disqualifying any of their connections. An example is a domain name with a CNAME that points to a hosting service. The hosting service should be excluded to disqualify assets pointing to the same hosting provider. This can include 3rd party services like a DNS service, a CDN, or a SaaS provider.

The discovered assets have several types, like domain, subdomain, IP, and Mobile App, organization, address, geolocation, TLD, person, email, ASN, etc.

These can also be confirmed as belonging to the organization to fine-tune the asset discovery algorithm. For instance, if an email is confirmed as belonging to an organization, all Whois records pointing to the email address will be qualified as potential nodes.