CORE Asset Groups

Purpose

This document describes how Asset Groups are configured in Configure > AppStaks in CORE.

Introduction

Asset Groups is imported from Web Applications and Instances in the SWAT platform. It contains of one or more assets grouped together in a way that makes sense within the organization.

Asset group risk is calculated as an average risk grade of the associated assets within the asset group, just like the AppStak risk.

Listing Available Asset Groups

Asset groups are created in Web Application. See Asset Groups for more information.

To list all the Asset Groups:

Navigate to Explore > Asset Groups in the left hand side navigation menu. All the Asset Groups are presented with a summary window to the right presenting the Overall Risk for the listed groups.

Activating an Asset Group provides Details for that specific group in a card on the right hand side. The Details view provide information about the Aggregated risk, Name, number of Assets in the group, number of Findings of the assets in the group, and if the asset group is part of an AppStak.

Clicking on the number of Assets redirects you to a list of the assets in the group.

Clicking on the number of Findings provides a list of findings, filtered to display only the findings related to the assets in the group.

The Exists in n AppStaks link at the bottom of the Details window informs you about the number of AppStaks that the Asset Group is part of.

Clicking the link displays a list of the AppStaks the group is part of.

Adding Assets Group to AppStak

Go to Configure > AppStaks in the left side Menu.
Open an AppStak.
Click + Add Rule.
Select Asset Group.
Select an Attribute.

Select from Name, Host Name, Network, Provider, and Tags.
Add a Value to filter the Asset Groups.

Example

Values support regular expressions.
.*-instance will match all asset groups ending with "instance".
Click Save.

Multiple filters can be added by clicking the + Add Filter and will follow a Boolean AND logic so that all need to be true for the rule to apply.

Removing a filter is done by clicking the bin icon to right of the Attribute box.

To remove the rule with all the filters, click the red Delete Rule button.

Asset Groups also inherits tags from AppStaks.

Multiselect

Several Asset groups can be selected in the table and provides an aggregated risk in right hand card.

Column

Option	Description
Asset Group Name	The name of the Asset Group
UUID	The unique identifier of the Asset Group
Tags	Any associated tags assigned to the Asset Group