Asset Management is a process of tracking assets in your organization, verifying that each asset is up-to-date with security or software patches, as well as ensuring that each asset in the organization is sufficiently protected and properly configured.

SIRP’s Assets Management module allows you to keep track of assets in your organization, consequently allowing you to identify the weak areas that you don’t know about.

With all the assets integrated into one module, SIRP allows keeping an active tab of assets on Incident Management, Threat Intelligence, and Vulnerability Management. SIRP fuses this aggregated information with the Asset severity to provide a score called SIRP Security Score (S3), which makes security data instantly actionable. This enables organizations to prioritize risks, make better decisions faster, and respond more effectively.

With SIRP’s Assets module, you can distribute your organizational assets into nine different categories:

The Assets module can be accessed by clicking on Assets in the Main Menu.

The page displays the list of all the assets currently added in SIRP along with the following options at the top:

To add a new asset, click on the Create Asset button. The page will show a form with several input fields. First, select the appropriate Asset Category from the dropdown. This will change the remaining input fields on the form and show the ones that are relevant to the selected category. Enter the details of the assets in the respective fields then click Create.

If you wish to define an additional field for a particular asset, click on the Add Field button in the top right corner. This will open a popup where you can enter the Name of the Field and click Add. The new field will appear at the end of the existing input fields. Enter the desired value in the newly added input field and click Create.

Note: It is not mandatory to fill information into all the displayed fields.

Here is the list of fields available for each category:

Note: These fields can be enabled and disabled from the Administration section. You can choose the fields that you want to use and the ones that you don’t want to use.

The newly added asset will appear in the list of Assets.

Along with the possibility to add Assets manually, SIRP also provides an option to bulk import assets from an Excel sheet. To import the assets, go to the Main Menu, select Asset, and click on Import.

Main Menu > Asset > Import

The Asset import page contains a sample Excel format that you can download and fill up with your asset list. Once completed, click on the Choose File button under the “Import File” option, then browse the Asset inventory file that you created by using the given sample assets sheet.

Click Import.

SIRP will process the uploaded sheet and store all the assets in the database. The newly added assets will appear in the main Assets list.

Note: The Hostname and IP Address are mandatory fields in the template.

SIRP’s Asset module also has the option to discover the assets over the network. SIRP scans the network ranges and adds the machines that it finds to be up.

The Asset Discovery options work based on the rules. You can add Rules to define the network ranges that SIRP has to scan, along with the default properties that should be added with each of the discovered assets.

To access Asset Discovery, go to the Main Menu, select Asset, and click on Asset Discovery.

Main Menu > Asset > Asset Discovery

This page displays the list of Rules with an option to either View the details of a rule, Edit a rule, Execute a rule, or Delete a rule. You can adjust the columns of the list by clicking on the ellipsis icon and setting the fields as required.

You can add a new rule by clicking on the Add Rule button displayed at the top left of the page.

The form allows you to define the default properties of any assets discovered as a result of this particular rule. Enter the required information:

The newly added Rule will appear in the main list. The Rules are executed, and results are stored automatically. But if you wish to initiate a scan manually, click on the Play icon.

Clicking on the View icon will display the list of assets discovered as a result of the execution of a rule. From there, any of the identified assets can be either added to the main Assets list or discarded.

SIRP allows you to divide assets into different categories called blocks. This defines the segmentation across the entire network.

The significance of this feature is that whenever a new Alert is ingested and one of the IP addresses found in the Alert exists in the defined Network blocks, that IP will lead to the auto-creation of an Asset as well as auto-tagging within the Alert.

To access Network Blocks, go to the Main Menu, click Assets then Network Blocks.

Main Menu > Assets > Network Blocks

Fill in the details such as Label, IP Address, Netmask, and Internal, and click Create

Users can also add assets dynamically from various Containers without the need to navigate to the Asset module separately. You can use the Affected Asset tab within the view screen of containers (Incident Management/Threat Intelligence/Cases) to add a new Asset.

To add a new asset form a container:

Navigate to the detailed view of a Container (Incident Management/Threat Intelligence/Cases)

Locate and click on the Affected Asset tab at the bottom

You will find two options:

Another option to Add a new Asset is on the Incident Add/Edit form

When creating or editing Container records, a form (drawer) will appear. Within this form, locate the "Affected Assets" field then click on the + sign adjacent to the field.

You will get a form in a popup screen to add Asset details

Enter the Asset details and click Add

Asset Category and one of Hostname and IP address is mandatory