Document Version: 3.5

Date2020-04-06


Copyright

© 2021 Outpost24® All rights reserved. This document may only be redistributed unedited and unaltered. This document may be cited and referenced only if clearly crediting Outpost24® and this document as the source. Any other reproduction and redistribution in print or electronically is strictly prohibited without explicit permission.

Trademark

Outpost24® and OUTSCAN™ are trademarks of Outpost24® in Sweden and other countries.


Purpose

This document provides a comprehensive overview of the Filter and Settings panel and the Tagging feature. It is assumed that the reader has basic access to the OUTSCAN/HIAB account with Appsec subscription.

Introduction

Common Settings include filtering options, and settings to customize the view.

Filters allow for quick limitation of viewed data to relevant entries. By applying filters in multiple columns, it is possible to narrow down a large dataset to find a particular entry or to discover any abnormalities, missing data or missing actions.

Example

When looking for a particular hostname (that includes a number in domain name) in Assets view, choose Hostname in the Type column and enter that number in the Name column to narrow down the search results. Additionally, a scanner ID can be submitted to ensure a direct search result.

Customize each view by adding or removing the columns and by applying filters. Each view has a Filter and Settings panel. To access it, click the Filter icon in the bar spanning along the left edge of the table. This displays the Filter and Settings panel.

Inside the Filter and Settings panel, it is possible to add or remove columns,  apply filters, save sorting order, and column width and make it persist on your account.
To save your preferred settings, click on the Save icon found in the Settings tab of the table settings panel. 

Filters

To access the filtering, click the Filter tab on the left side of the screen. A list of available columns is displayed:


Use the search field to quickly find the column name of choice in the list of applied filters. The Clear icon next to the search field, restores the search phrase and lists all columns unfiltered.

The Clear filter button to the left of the filter field clears all of the filters applied to the table to mitigate the need of manually going through all fields that have filter applied and resetting them one by one.

The checkbox next to column name toggles the visibility of the column inside the table.


Note

A filter can be applied in the background. This allows for enabling only columns of interest while filtering by any columns, without the need of specifically having them visible in the table to enable filtering. Pay extra attention to the Filter counter beside the column name to see how many filters are applied to the table.

Settings

To access the table settings panel, click the Settings tab. 

Click on the Save button to enable the preferred setting. It is used as a default when viewing that particular section if no other parameters are specified in the URL.

Multi-Level Sorting

Sorting can be applied to the columns. The number displayed beside the column name indicates the order of sorting. After selecting the first column, press and hold the Shift key while selecting multiple columns in the desired order.

Example

When column 1 and column 2 are selected consecutively,  the table is sorted based on column 1 first, and then column 2, within the first sort.



Tags

Tagging allows to group and filter data based on a user-defined value. Tags can be added in:

  • Assets
  • Configurations
  • Findings
  • Compliance findings
  • Accounts

Add a Tag

Follow the below procedure to apply a tag to a specific item.

  1. Go to desired view.
  2. Select one or more items to see the available user actions at the bottom of the window.
  3. By clicking on the Add tags button, the below dialog box is opened.

  4. Select a tag from the drop-down menu, or provide a new tag in the Tags field if the list is empty.
    Input format: Key:value or Key

    Note

    The colon character ":", splits the content of the tag into a key and a value. Thus allowing a granular search for the occurrences of tags containing the search word in the key or in the value. Tags that do not contain a colon are handled as keys.

    Example:

    When the added tags are:

    • aws:yes
    • hosting:aws 
    • aws

    Searching for aws results in all 3 entries.

    Whereas, searching for aws: results in tags with aws string as the key.

    To find the values containing the phrase, prefix it with colon. Searching for :aws results hosting:aws only.


  5. After typing the new tag, press Enter followed by the SUBMIT button. 

  6.  The newly added tag for a specific object is visible under the Tags column. 

    Tip

    Examples of a valid tag:

    • location:london
    • location:vancouver
    • hosting:one
    • digital-media
    • dc2
    • NetworkAlpha

Remove Tag

Follow the below procedure to remove a tagged item.

  1. Go to the desired view (Assets or Configurations or Findings).
  2. Select the applicable items to see the available user actions at the bottom of the window.
  3. By clicking on the Remove tags button, the below dialog box is opened.

  4. Currently applied tags are listed here. Select a tag you want to remove.

  5. Click on the REMOVE button. 

  6.  The removed tag can be verified under the Tags column.

Tag Inheritance

Some resources inherit tags from their parent resources. This is true for the following resources:

  • Scans (inherited from Configurations)
  • Matches (inherited from Assets)
  • Services (inherited from Assets)
  • Credentials (inherited from Accounts)
  • Findings (inherited from Assets)
  • Compliance findings (inherited from Assets)


An example:

Setting a location:sydney tag on the gcp-account-180821 resource will populate the same tag on all compliance findings associated with this resource:


The inherited tags will appear as greyed out:


These tags cannot be removed from the resource unless they are removed from the parent resource.