What is the Attack Surface Mapper? 🤔
It is important to identify and analyze different aspects of an organization's infrastructure that may be vulnerable to exploitation by malicious actors. This includes scanning network hosts, analyzing web applications, enumerating subdomains, identifying open ports, and performing other reconnaissance tasks. This helps prioritize security efforts, focus on areas that require immediate attention, and mitigate potential risks.
What data is captured by the Attack Surface Mapper scan? 🤔
Here is what you will see once you have completed the ASM scan against a domain.
Data Label | Description / Use Case |
|---|---|
DNS Records | |
Emails | |
MX Records | |
Open Ports | |
RAW Headers | |
S3 Buckets | |
SPF Records | |
Subdomains | |
Target IPs | |
Usernames | |
Vulnerabilities |
Company Attack Surface Mapper - Table of Contents
Company Attack Surface Mapper - Overview
On this page, you can view a list of domains configured for scanning.
Use the side navigation toolbar to add a ‘New Domain’ if no records are displayed.
Company Attack Surface Mapper - Details
You will find the Name and Domain listed under the Domain Configuration section
Column Label | Description / Use Case |
|---|---|
Name | Displays the given name of the scanning profile. Example: Ryans ASM Test for Google |
Domain | Displays the domain of the scanning profile. Example: google.com |
Company Attack Surface Mapper - Side Navigation Toolbar Overview
Add Domain - tap to add a new domain configuration to the ASM scanning.
Edit Domain - select one record first, then tap to Edit the scan details.
Remove Domain - select at least one record first, then tap to Remove the selected domain configuration.
Scan Now - select at least one record first, then tap to initiate an ASM scan.
Jobs - tap see historical ASM job history and details.
Alerts - tap to see the system events in our timeline-style format.
Dashboard - redirects to the ConnectSecure reporting platform, including our Dashboards, Data Sources, Pinboards, Slideshows, Schedules, and more.
Company Attack Surface Mapper - Side Navigation Toolbar Actions
Add Domain
Tap to create a new domain configuration for ASM scanning. You must include the Name and Domain and tap the save button to finish.
NOTE: Tap the ‘Scan Later’ checkbox if you do not want to run the ASM scan right away.
Edit Domain
You must first select one record from the left side checkbox, then tap the Edit Domain icon to make any changes.
Tap Save once you are completed, otherwise, click Cancel to go back.
Remove Domain
You must select at least one record, then tap the Remove Domain icon to delete the profile. You will be prompted with a confirmation message that you must click Yes to remove the domain.
Click Yes, otherwise, click Cancel to back out and keep the domain.
Scan Now
You must select at least one record first, then tap the Scan Now icon to initiate an Attack Surface Mapper scan manually. This will show up under the Jobs section where you can monitor the progress.
Jobs
Tap the Jobs icon to see a history of the Jobs running for the company selected.
Alerts
You can use the timeline style to view the changes and updates in the System Events.
Dashboard
Tap the dashboard icon to be redirected to our external dashboard builder.
https://dashboard.myconnectsecure.com