scoutINSPECT - Inventories
B
Written by Benjamin Dewey
Updated over a week ago

Inventories Overview

The Inventories page shows all the raw data that scoutINSPECT has collected through active scanning, these include all your:

  • IP addresses (IPv4 and IPv6)

  • Domain names

  • DNS records

  • Network records

  • Cloud storage buckets

  • Cloud computing services

  • Security certificates


The graphs and charts on the dashboard provide snapshots of how many of your assets have been identified, assigned tags, who owns them, changes to your inventory, and more.


Inventories help analysts see the assets, keep track of them, and get more details about what software (services) each is using.

NEXT:


My Inventory Tracker

My Inventory Tracker offers three different views for tracking items in your inventory over the past 7 days, including:

  • New This Week - Shows how many different types of assets were discovered during the week.

  • Ownership - Shows how many of the assets now have owners (analysts or other persons) versus how many lack ownership. NOTE: The ideal percentage number here should be "100%" meaning that all your assets have been owned.

  • Tags - Assets that were discovered and have been assigned tags such as, "Finance Server," "Company ABC domain name," "ABC vendor," etc.


Total Inventory and Total Owners

This section contains three inventory views:

Total Inventory - The total number of assets (e.g., DNS records, security certificates, network services: IPs, domains, etc.) in the inventory over the last 30 days.

Top Inventory Owners - Who in your team owns the most assets.

Inventory Change - How the inventory has changed over the past 12 months.


Inventories Per Owner

Inventories Per Owner provides you with a view of who in your team currently owns assets, as well as the names of the owners with the most assets. Assets that are not owned will display as "Unassigned."


Inventories Per Tag

Inventories Per Tag graphically shows and a current list your tagged assets.

Tagging is when an asset is discovered then given a label to identity what it is.

For example, an IP could be tagged as "Finance Server," meaning that IP belongs to a server that handles finance data.


This section also offers how many assets have been tagged.


Top Inventory Changes

Top Inventory Changes shows a bar graph that informs you how assets in your inventory have changed since discovery.

For example, how many assets now have comments, are owned, and have been assigned tags.

Ideally, you want the bars in this graph to be on the positive side (e.g., +40, +80). When the bars are light blue and on the negative side (e.g., -40, -80), it is not considered good cyber hygiene, meaning that there are a lot of assets that need your attention and action. These assets have to be assigned owners, be tagged, and have comments in their respective Asset Details page.


My Inventory Table

The second half of the Inventories page shows a table listing the assets in your inventory. The table offers information on asset Type, Name, Source Domain, Inventory Details, Owner, date of Last Seen, and Tags.

  • Type - Asset types can include: Software, Network Service, DNS Record, etc.

  • Name - The name of the asset can be represented by an IP address or the name of a software/service (e.g., Apache, Telnet, etc.).

  • Source Domain - A domain linked to particular exposure or inventory. It can also be a subdomain of a seed domain.

  • Inventory Details - Pertinent details about the asset in the inventory. The types of details will vary from asset to asset.

  • Owner - Who in the team owns the asset.

  • Last Seen - When the issue was last updated.

  • Tags - Labels used to identity assets (e.g., "Finance Server," "Application Server," "Main domain name," etc.).


Editing and Updating Items in My Inventory Table

You can edit or update the Owner of the asset. To do this, simply hover your mouse on the desired item, then click on the pencil icon that appears on the right.


Filter Items in My Inventory Table

The My Inventory table allows you to use filters to quickly find assets by type, owner, and tag.

Here are a few ways to filter or sort the items on the table:

Using the Filter Field

On the My Inventory table, look for the Filter field and type in a keyword (i.e., an asset's IP address, domain name, or a service name, port number, exposure name, etc.). Then, click Filter.

You may also choose from pre-selected filters using the Filters drop-down menus by clicking on the Filter button.

Here you can filter by:

  • Type

  • Source domain

  • Owner

  • And, tag (e.g., "finance server," "mail server," etc.)

Clicking on a Graph

You can also filter items on the table by clicking on any of the graphs on the first half of the page.

The second half of the page will display the filter that was applied when you clicked on the graph. The table will also be sorted based on what was clicked.


​


My Inventory Table Bulk Actions

You can change the Owner for multiple assets at the same time on the inventory table. You can also add or remove tags (e.g., "finance server, "mail server," etc.) in bulk. To do this, follow the steps below.

Steps

1. On the inventory table, first select multiple assets you'd like to edit in bulk, then click on Edit Inventories.

2. The Edit Inventories dialog box will display and show you the number of items you selected on the table which will be modified/edited.

3. In this example, we will change the Owner of the selected assets on the table. We click on Save when we are finished.

The table should now reflect the changes made on the assets that were selected.


My Inventory Details

When you click on the name of an asset from the Inventory table, a page will load with details about the asset.

#1. This section shows the asset name. Below is background information about the what the asset is or other details. You can add a tag for the asset here as well.
​

#2. This section contains details about the asset's status (e.g., Active, Inactive), date the asset was discovered, date the asset was last modified, and its owner.
​

Depending on the type, the page will display boxes with information about the asset's:
​

#3. Inventory Details - Provides information about the type of asset, including the software version (if any), category, description, source (IP address), raw, vendor, website (if applicable), cpe, product, etc.

#4. Related Inventory - Provides information about any other assets in the inventory that are related to the asset (e.g., Network Services, DNS Record, etc.) Depending on the asset type, this box can contain details on the software version (if any), ip_str, name (e.g., http), cpe, OS type, port number, etc.

NOTE: You may have several Related Inventory records about an asset on the page.


Notebook

My Inventory includes a section called Notebook where analysts can write comments or ask questions about the asset.

Furthermore, when the asset is assigned an owner, Notebook will record the activity and add it as a comment (e.g., "Set owner: Jane Dully.")


Did this answer your question?