Finding, Filtering, and Sorting Assets

This article describes how to find desired assets in the Websites, Servers, and Auto Discovery views using the filters and search field.

From the Websites, Servers, or Auto Discovery view of Secureworks® Taegis™ VDR, use the free-form search field and an extensive set of filters to easily find and sort assets based on their characteristics.

All views present a list of filters with checkboxes on the left side, a search field at the top of the view, and a list of assets.

Assets are presented with their associated tags. The dark-grey tags correspond to user-defined tags in VDR (see Creating New Tags); the light-grey tags correspond to auto-tags that were automatically applied based on asset characteristics (using a tooltip to describe the type of tags, such as Edge Service name, response code, known responses, etc.).

Using the Search Field from the Websites, Servers, or Auto Discovery View ⫘

At the top of each of the views, the free-form search field allows you to find assets by URL (Websites) and IP/Hostname (Servers). The search query will trigger as soon as three or more characters are typed in.

You can use basic search terms, but a more complete search grammar supporting Advanced Search Queries is also supported.

Using Filters ⫘

On the left side of each of the views, use a combination of filters to better refine the assets displayed.

When making selections in different filter sections, filtering will be exclusive: assets must match both filters to be displayed. Selections in the same filter section are additive: assets matching at least one of the filters will be displayed.

Websites View Filters ⫘

• Schedule — Filter assets based on their scheduling (daily, weekly, etc.).
• Tag — Filter assets based on their tags (see Creating New Tags for information on tag management).
• Response Code — Filter assets based on their HTTP response code (according to RFC7231).
• Content Type — Filter assets based on their HTTP content type header field.
• Supported Scheme — Filter assets based on whether they're accessible through HTTP and/or HTTPS.
• Known Response — Filter assets based on the type of response/page they present, compared to known templates in VDR database (Hypervisor page, Default web server page, etc.).
• Creation — Filter assets based on their creation type: auto discovered or manually added.
• Edge Service — Filter assets based on the Edge Service through which they are accessible (see Reaching Firewalled & Internal Assets).
• Authentication Status — Filter assets based on their authentication status.

Servers View Filters ⫘

• Schedule — Filter assets based on their scheduling (daily, weekly, etc.).
• Tag — Filter assets based on their tags (see Creating New Tags for information on tags management).
• Open Ports — Filter assets based on their open ports. This filter only shows the ten most commonly exposed services and open ports in the server view. For more details on open ports for a single server, please consult the Report Detail View.
• OS Type — Filter assets based on their Operating System type.
• OS Family — Filter assets based on their Operating System family.
• Creation — Filter assets based on their creation type: auto discovered or manually added.
• Edge Service — Filter assets based on the Edge Service through which they are accessible (see Reaching Firewalled & Internal Assets).
• Authentication Status — Filter assets based on their authentication status.

Auto Discovery View Filters ⫘

• Schedule — Filter assets based on their scheduling (daily, weekly, etc.).
• Tag — Filter assets based on their tags (see Creating New Tags for information on tags management).
• Edge Service — Filter assets based on the Edge Service through which they are accessible (see Reaching Firewalled & Internal Assets).

Using Columns to Sort Assets ⫘

At the top of the list of assets in the Websites and Servers views, select certain column headings to sort the list in ascending or descending order based on the specific column value.

• Vulnerabilities — Sort the assets by the combined weight of their vulnerabilities (this uses an internal scoring system not directly visible through the interface).
• Address — Sort the assets by name (websites) and/or IP (servers).
• Report Date — Sort the assets by the last complete report date.
• Timeline — Sort the assets by their creation date in VDR.