Generate an Asset Exposure Graph Query

You can generate a query to view an Asset Exposure Graph, which helps you to visualize an attack path from multiple assets down to one asset.

To generate an Asset Exposure Graph query:

1. In Attack Path Analysis, access the Discover tab.

2. Click Asset Exposure.

   The Source and Target sections appear. The Source box shows the All Assets option by default.

3. In the Target section, click the button.

   The target options appear.

4. For each target you want to include in the query:

   1. Select the radio button next to the type of target you want to use for the query:

      • Asset type — Generate a query based on a certain type of asset.

      • Specific asset — Generate a query based on a specific asset.

   2. In the text box, type the asset type or specific node/asset you want to use for the query.

   3. (Optional) To apply filters to the target:

      1. Click the button.

         The Filters window appears.

      2. In the Parameter drop-down, select the parameter by which you want to filter the target.

      3. In the Operator drop-down, select the operator to apply to the parameter.

      4. In the text box, type or select the value or values you want to use for the filter.

         Note: The values you can use differ depending on the parameter you selected.

      5. Click Apply and search.

         Attack Path Analysis applies the filter to the target.

5. Click Search .

   Attack Path Analysis returns any attack paths that match the query you created. For more information on interacting with the data, see Interact With Attack Path Data.

6. (Optional) To save the query as a preset, at the top of the pane, click the button.

   The Save as preset window appears:

   1. In the Name of preset text box, type a name for the query.

   2. In the Description of preset text box, type a description of the query.

   3. Click Save preset .

      Attack Path Analysis saves the query as a preset.

   Tip: When you save a query as a preset, you can use it as a filter on the Findings tab.

What to do next:

Interact with the attack path data provided by the query.