Generate a Blast Radius Query

Required User Role: Basic, Scan Operator, Standard, Scan Manager, Administrator, or Custom Role

In the Attack Path section, you can generate a query to view Blast Radius, which helps you to visualize an attack path from one asset to multiple other assets.

To generate a Blast Radius query:

  1. Access the Top Attack Paths tab.

  2. In the Custom Queries section, click Attack Path Query Builder.

    The Query Builder pane appears.

  3. Select the Blast Radius radio button.

    The Target options auto-fill.

  4. Click the Source drop-down, and, for each source you want to include in the query:

    1. Select the radio button next to the type of source you want to use for the query:

      • Asset type — Generate a query based on a certain type of asset.

      • Specific asset — Generate a query based on a specific asset.

    2. In the text box, type the asset type or specific node/asset you want to use for the query.

      1. Click the button.

        The Filters window appears.

      2. In the Parameter drop-down, select the parameter by which you want to filter the origin.

      3. In the Operator drop-down, select the operator to apply to the parameter.

      4. In the text box, type or select the value or values you want to use for the filter.

        Note: The values you can use differ depending on the parameter you selected.

      5. Click Apply and search.

        Tenable Exposure Management applies the filter to the origin.

  5. Click Search .

    Tenable Exposure Management returns any attack paths that match the query you created. For more information on interacting with the data, see Interact with Attack Path Query Data.

(Optional) Save your Query as a Preset/Bookmark

Required User Role: Standard, Scan Manager, Administrator, or Custom Role

Once you've built your custom query, you can save it as a preset, where you can then access it as a bookmark when creating new built-in attack path queries.

To save your query as a preset:

  1. At the top of the pane, click the button.

    The Save as preset window appears.

  2. In the Name of preset text box, type a name for the query.

  3. In the Description of preset text box, type a description of the query.

  4. Click Save preset.

    Tenable Exposure Management saves the query as a preset. You can access your saved queries in the Bookmarks section of the Query Library.

Tip: When you save a query as a preset, you can use it as a filter on the Top Attack Paths tab.

What to Do Next

Interact with the attack path data provided by the query.