Follow

Automatically Labelling Assets

Labelling assets are really important to classify security data in meaningful, chewable, so to speak, chunks.

Automating label assignments to assets are implemented through writing categorization rules under Admin->Categorization sub menu.

The figure below shows the list of already created categorization rules. They can be executed, edited and deleted. These rules are also executed (if the related settings is enabled in the Company Settings page under Automation section) periodically every one hour.

When the "new configuration" button is clicked, a dialog shows as shown below. On this dialog entity type is selected as "Asset" since we'll be creating a new configuration rule for automatic asset labelling.

The "Content" text area is the value of the rule that will be executed and question mark link can be clicked for some of the rule examples.

Lastly Label/Tag/RootCause text box includes the label that will be assigned when the rule above matches with an asset. OS, open ports, value and type of an asset can be used in a rule.

In order to make sure the rule is well written and executed as aimed, the "Search" button should be clicked and the example results should be analyzed whether the rules is good to save.

After that check, Save button saves the rule.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.
Powered by Zendesk