Adding Assets to a Client
Assets within PlexTrac are stored outside of reports at the client level within the platform. An asset can exist as a standalone file in the Clients module or associated with a finding, referred to as an affected asset.
Organizations can efficiently manage and track their cybersecurity resources by utilizing PlexTrac to organize and store assets. This centralized approach ensures that important files and information are readily accessible when necessary, facilitating collaboration, efficient vulnerability management, and streamlined remediation efforts.
Creating an Asset
Step 1: From the Clients module home page, click the row of the client or View under the "Actions" column.
Step 2: Click the Assets tab.
Step 3: Click the Add asset(s) pulldown menu and select Create asset.
Step 4: The "New Asset" modal appears. Enter the desired information into the appropriate fields.
Asset Name is the only required field.
Step 5: Click Save at the bottom of the modal.
The asset now appears in the Assets tab.
Adding Assets via Bulk Paste
Step 1: From the Clients module home page, click the row of the client or View under the "Actions" column.
Step 2: Click the Assets tab.
Step 3: Click Add Asset(s), then select Bulk paste assets from the pulldown menu.
Step 4: Paste asset information into the provided box as a return- or comma-separated list.
PlexTrac will parse the assets and add them to the finding. URLs with paths (i.e., www.plextrac.com/test/) will be separated into parent and child assets.
Step 5: Click Next.
Step 6: PlexTrac will search for assets in the bulk paste that match existing assets and identify them separately from new assets on the Review tab. This provides the option to deselect any assets before import.
Step 7: Click Next.
Step 8: Add any tags (optional). Click Add X assets.
A message confirming import and assets are viewable from the Assets tab will appear.
Importing Assets to Clients
PlexTrac supports asset imports using an NMAP file or a CSV template:
NMAP files: Network Mapper is a free and open-source network discovery and security auditing utility. More information on NMAP can be found on PlexTrac's Integrations section of this site.
CSV: PlexTrac provides a template to upload assets to a client. Click the file below to download the template containing all permitted fields and sample values:
CSV Asset Template Rules
Asset Type
Column K "type" ingests the Asset Type value. The value for this field must be one of the following: Workstation, Server, Network Device, Application, or General. If another value is used, it will be ignored, and the Asset Type value will display in PlexTrac as "Not Set."
This field is not case-sensitive.
PCI Status
Column S "pci status" ingests the PCI Compliance Status value. The value for this field must be blank, Passor Fail. If another value is used, it will be ignored, and the Asset Type value will display in PlexTrac as "Not Set."
This field is not case-sensitive.
Ports
Column G ingests port information. Once imported, this information is found in the asset's Notes/Description tab.
Multiple values for the ports cell are separated by commas, such as:
22/open/tcp//ssh//OpenSSH 4.3 (protocol 2.0)/, 25/open/tcp//smtp///, 53/closed/tcp//domain///, 70/open/tcp//gopher///, 80/open/tcp//http//Apache http 2.2.3 ((CentOS))/, 113/open/tcp//auth///, 31337/open/tcp//Elite///
Each port can have up to eight values, separated by a slash. This means there must be seven slash characters (/) for each port ingested, even if no data exists within the slashes. If the correct number of slashes is not used, an import error will appear, and the file will not be accepted.
Examples of valid data values for the ports field:
80///////
80/open//////
80/open/tcp/////
80/closed/tcp/auth////
80/open/tcp/auth/ssh///
80/open/tcp/auth/ssh/test 6//
80/open/tcp/auth/ssh/test 6/Apache http 2.2.3 (CentOS)/
The first value captures the port number. The second value captures the port status (any ports with a status of Closed will not be imported). The third value captures the protocol. The fifth value captures the service, and the seventh value captures the version.
If the port has a defined closed status, the cell is left blank entirely (the field is optional), or just one value is entered (such as 15.22.161.22), then it is not necessary to include all seven slashes.
Importing Assets
Step 1: From the Clients module home page, click the report row or View under the "Actions" column.
Step 2: Click the Assets tab.
Step 3: Click Import assets.
Step 4: Drag a file into the modal or click the box to navigate to the file on the computer.
Step 5: Click Import.
A message will appear confirming import.
The new assets are displayed on the Assets tab. Click View of the imported asset to see imported values.
To view imported port information, click Notes/Descriptions.
Last updated
