Interact with Asset Query Data

After you run an Asset Query, Attack Path Analysis displays the results associated with your query. From here, you can drill down and interact with the data to gain further insights.

To view and interact with asset query data:

  1. Generate an Asset Query with the Asset Query Builder.

    The Query Result page appears.

  2. On the Query Result page, you can:

    Note: Because the options and data in this section depend on the type of query you run, some of the following items may not be available for your query.

    • View a list of assets that match your query. For example, if the query searches for workstations, the list displays all assets that have a type of Workstation. This table includes the following asset information:

      Column Description
      Name The asset name.
      Type

      The asset type, for example Workstation or ServiceAccount.

      Tip: Hover your mouse cursor over the icon in this column to view the full name of the asset type.
      NES

      The Node Exposure Score (NES) is a metric produced by Attack Path Analysis to understand the blast radius exposure of a node. This metric considers the Vulnerability Priority Rating of all vulnerabilities on the asset as well as other relationships such as software installed, sub-networks to which the asset belongs, internet exposure, etc.

      AES Tenable calculates a dynamic AES for each asset on your network to represent the asset's relative exposure as an integer between 0 and 1000. A higher AES indicates higher exposure.
      ACR Tenable assigns an ACR to each asset on your network to represent the asset's relative criticality as an integer from 1 to 10. A higher ACR indicates higher criticality.
      View Node Click the button to view the asset nodes in a graphical format. For more information, see View Asset Nodes.
      Actions

      Click the button to view available actions.

      A menu appears:

      • Click Export as CSV to export the asset information as a .csv file.

View Asset Nodes

When you click View Nodes in the Query Result list, Attack Path Analysis shows a graphical representation of the selected asset node.

Note: Because the options and data in this section depend on the type of query you run, some of the following items may not be available for your query.

In this section you can: