Asset Details

The Properties section highlights details about the asset's properties.

Here, you can view asset details including:

Each tile includes the following information:

• Key Properties:

  • Class — The asset class associated with the asset, for example, Account.

  • Category — The category associated with the asset, for example, ACCOUNT.

  • Description — Where available, a description of the account.

• Network and Administrator Profile:

  • OU — The Organizational Unit (OU) associated with the account.

  • Domain — The domain associated with the account. For more information, see Domains in the Tenable Identity Exposure User Guide

  • Forest Name — The forest name associated with the account. For more information, see Forests in the Tenable Identity Exposure User Guide.

• Account Provider — The provider of the account, for example, Azure Active Directory.

• Account AES — The overall Asset Exposure Score associated with the account.

• Last Use — The date on which the account was most recently accessed by a user.

• Last Location Used — The physical location of where the account was most recently used.

• Account Activity — The activity status of the account, for example, Active.

• Weakness — A graphical representation of weaknesses on the account. This section includes a line graph and an individual count of each weakness and its criticality. For more information, see Weaknesses.

  

The Devices section shows all devices associated with the asset. This list highlights the hosts used by an account. Each device and its relevant information is listed as a tile on the page.

On each tile, you can view the following device information:

• Key Properties:

  • Class — The asset class associated with the device.

  • Category — The category associated with the device, for example, general-purpose.

  • Description — Where available, a description of the device.

  • Drivers — A list of drivers installed on the device.

• Network and Administrator Profile:

  • Static IP Assignment — The static IP address associated with the device.

  • OU — The Organizational Unit (OU) associated with the device.

  • Domain — The domain associated with the device. For more information, see Domains in the Tenable Identity Exposure User Guide

  • Forest Name — The forest name associated with the device. For more information, see Forests in the Tenable Identity Exposure User Guide.

• Device AES — The overall Asset Exposure Score associated with the device.

• Weakness — A graphical representation of weaknesses on the device. This section includes a line graph and an individual count of each weakness and its criticality. For more information, see Weaknesses.

  

• Last Use — The date on which the device was most recently accessed by a user.

• Last User — The last user account to access the device.

• Last Location Used — The physical location of where the account was most recently used.

• Identities associated with the Device — Where applicable, any Active Directory or Microsoft Entra ID Identities associated with the device.

• Devices Using MFA — Indicates if the device requires multi-factor authentication (MFA) for user login.

• Device OS — The operating system (OS) running on the device. In the upper-right corner of the box, view a color-coded status of the OS, for example, Active.

The Attack Paths section shows a table list of the top attack paths in which the asset is present.

The attack paths list includes the following information:

• Name — The name of the attack path.

• Path Priority Rating — The priority of an attack path. Tenable Exposure Management calculates the PPR based on the relative number of attack paths to critical assets. Tenable Exposure Management categorizes priority levels as Low, Medium, High, and Critical.

• Nodes — A visual representation of the nodes involved in the attack path that indicates the node type and the order in which the nodes might be accessed.

• See in APA — Click See in APA in the row of any attack path to navigate directly to the Top Attack Paths page with the selected attack path displayed by default.

The weaknesses table includes the following information:

• Weakness Name — The Common Vulnerability Exposure (CVE) ID associated with the weakness.

• Type — The type of weaknesses: Misconfiguration or Vulnerability.

• Description — A brief description of the weakness.

• Severity — The severity of the weakness, for example, Critical.

  Note: At this time, Tenable Exposure Management does not include information for Info level severity weaknesses.

• VPR — The Vulnerability Priority Rating (VPR) of the weakness.

• Impacted Assets — The number of assets impacted by the weakness. For more information, see Assets.

• Source — The application the weakness' asset originated from, for example, Tenable Vulnerability Management.

• Last seen — The date at which the weakness was last seen in a scan on the asset.

• Click See details to view more details about a weakness. For more information, see Weakness Details.

• Tag name — The name of the tag value or tag category.

• CES — The Cyber Exposure Score for the tag value or tag category. The CES represents Cyber Exposure risk as an integer between 0 and 1000, based on the Asset Exposure Score (AES) values for the assets to which the tag is applied. Higher CES values indicate higher risk.

• Related Assets — The number of assets to which the tag is applied.

• Weaknesses — The weaknesses associated with the asset. For more information, see Weaknesses.

• Source — The application the tag originated from, for example, Tenable Vulnerability Management.

• Last updated — The date on which a user last updated the tag.

• Click See details to view more details about a tag. For more information, see Tag Details.

The Entitlements section shows entitlement information for assets who have roles, either:

• Assigned in Microsoft Entra ID

• Enabled by Tenable cloud scanning the Active Directory and adding the appropriate domain.
  

The entitlements section includes the following information:

• Entitlements — The name of the asset entitlement.

• Trustees — The number of trustees associated with the asset entitlement. Click the number to navigate directly to the Assets page filtered by all assets to which these trustees have entitlements.

• Accessible Resources — The number of accessible resources associated with the asset entitlement. Click the number to navigate directly to the Access tab for the asset.

• Roles — The number of accessible resources associated with the asset entitlement. Click the number to navigate directly to the Roles tab for the asset.

• Account — The name and type of the account asset associated with the entitlement. Click the name to navigate directly to view details for that specific asset.

• Last Use — The date on which the entitlement was last used by the asset.

The Roles section shows all roles assigned to the asset. For example, if this identity has roles assigned in Microsoft Entra ID, their details appear here.

The roles list includes the following information:

• Roles — The name of the role assigned to the asset.

• Origin — An icon that indicates the origin provider of the account (for example, Azure AD).

• Severity — The overall severity of the asset, for example, Critical.

• Trustees — The number of trustees associated with the asset role.

• Entitlements — The number of entitlements to which the role has access.

• Last Use — The date on which the role was most recently used on the asset.

The Groups section shows a list of groups to which the asset belongs. For example, if this asset is a member of groups in Microsoft Entra ID or Azure Active Directory, they appear here.

The groups list includes the following information:

• Group — The name of the group to which the asset belongs.

• Account — The name of the account on the asset that belongs to the group.

• AES — The overall Asset Exposure Score associated with the account.

• Members — The total number of assets that belong to the group.

• Origin — An icon that indicates the origin provider of the group (for example, Azure AD).

• Click See details to navigate directly to the asset details page for the selected group.

The Access section shows access information for assets who have roles, either:

• Assigned in Microsoft Entra ID

• Enabled by Tenable cloud scanning the Active Directory and adding the appropriate domain.

The access list includes the following information:

• Asset Name — The asset identifier of the asset.

• AES — The overall Asset Exposure Score of the asset.

• Asset Class — The asset class associated with the asset, for example, Account.

• Entitlements — The directory path to which the asset has entitlement access.

• Entitlement Origin — An icon that indicates the origin provider of the entitlement (for example, Azure AD).

• Trustees — The number of trustees associated with the asset.

The Exposure Cards section shows all exposure cards associated with the asset. Assets can be part of global exposure cards, or custom cards created by users on the Exposure View page.

Click on any card to navigate directly to the Exposure View page with the selected card data displayed by default.

For more information on exposure cards and how to create them, see the following:

• Exposure Card Library

• Manage Exposure Cards

The Relationships section shows a list of all assets with a known relationship to the current asset for which you are viewing details.

The relationships list includes the following information:

• Relationship Type — The type of relationship between the two assets.

• Direction — Indicates whether the related asset is the Source or the Target of the asset relationship.

• Asset Name — The asset identifier of the related asset.

• Asset Class — The asset class associated with the asset, for example, Account.

• AES — The overall Asset Exposure Score of the related asset.

• Weaknesses — The weaknesses associated with the asset. For more information, see Weaknesses.

• Last Updated — The date at which a scan most recently identified the asset.

• Click See details to navigate directly to the asset details page for the selected asset relationship.

The Users section shows a list of users with access to the device. Each user and its relevant information is listed as a tile on the page.

On each tile, you can view the following information about each user:

• Key Properties:

  • Class — The asset class associated with the user.

  • Sources — The application(s) the user originated from, for example, Tenable Vulnerability Management.

  • Created Date — The date and time at which the user was created.

  • Last Observed At — The date and time at which the user last accessed the device.

• AES — The overall Asset Exposure Score associated with the asset.

• Weakness — A graphical representation of weaknesses on the asset. This section includes a line graph and an individual count of each weakness and its criticality. For more information, see Weaknesses.

  

The Device Accounts section shows a list of all accounts present on a host. Each account and its relevant information is listed as a tile on the page.

On each tile, you can view the following information about each account on the account:

• Key Properties:

  • Class — The asset class associated with the account.

  • Sources — The application(s) the account originated from, for example, Tenable Vulnerability Management.

  • Created Date — The date and time at which the account was created.

  • Last Observed At — The date and time at which the a user last accessed the account.

• AES — The overall Asset Exposure Score associated with the asset.

• Weakness — A graphical representation of weaknesses on the asset. This section includes a line graph and an individual count of each weakness and its criticality. For more information, see Weaknesses.

  

Each tile includes the following information:

• Violations — The number of assets found in violation of the exposure signal.

• Exposure Mgmt. — The exposure category associated with the exposure signal.

• Trends — The trend and percentage of change in violations within the last 7 days. For example, if the violations for this combination have increased by 5.45%, you'd see .

Click on a tile to navigate directly to the Exposure Signals page filtered by the selected exposure signal.