Generate an Asset Exposure Query

You can generate a query to view your Asset Exposure, which helps you to visualize an attack path from multiple assets down to one asset.

To generate an Asset Exposure query:

1. Access the Top Attack Paths tab.

2. In the Custom Queries section, click Attack Path Query Builder.

   The Query Builder pane appears.

3. Select the Asset Exposure radio button.

   The Source options auto-fill.

   

4. Click the Target drop-down, and, for each target you want to include in the query:

   1. Select the radio button next to the type of target you want to use for the query:

      • Asset type — Generate a query based on a certain type of asset.

      • Specific asset — Generate a query based on a specific asset.

   2. In the text box, type the asset type or specific node/asset you want to use for the query.

   3. (Optional) To apply filters to the target:

      1. Click the button.

         The Filters window appears.

      2. In the Parameter drop-down, select the parameter by which you want to filter the target.

      3. In the Operator drop-down, select the operator to apply to the parameter.

      4. In the text box, type or select the value or values you want to use for the filter.

         Note: The values you can use differ depending on the parameter you selected.

      5. Click Apply and search.

         Tenable Exposure Management applies the filter to the target.

5. Click Search .

   Tenable Exposure Management returns any attack paths that match the query you created. For more information on interacting with the data, see Interact with Attack Path Query Data.

6. (Optional) To save the query as a preset, at the top of the pane, click the button.

   The Save as preset window appears:

   1. In the Name of preset text box, type a name for the query.

   2. In the Description of preset text box, type a description of the query.

   3. Click Save preset .

      Tenable Exposure Management saves the query as a preset.

   Tip: When you save a query as a preset, you can use it as a filter on the Top Attack Paths tab.

What to do next:

Interact with the attack path data provided by the query.