Adding Assets to a Client

Assets within PlexTrac are stored outside of reports at the client level within the platform. An asset can exist as a standalone file in the Clients module or associated with a finding, referred to as an affected asset.

Organizations can efficiently manage and track their cybersecurity resources by utilizing PlexTrac to organize and store assets. This centralized approach ensures that important files and information are readily accessible when necessary, facilitating collaboration, efficient vulnerability management, and streamlined remediation efforts.

Creating an Asset

Step 1: From the Clients module home page, click the row of the client or View under the "Actions" column.

Step 2: Click the Assets tab.

Step 3: Click the Add asset(s) pulldown menu and select Create asset.

Step 4: The "New Asset" modal appears. Enter the desired information into the appropriate fields.

Step 5: Click Save at the bottom of the modal.

The asset now appears in the Assets tab.

Adding Assets via Bulk Paste

Step 1: From the Clients module home page, click the row of the client or View under the "Actions" column.

Step 2: Click the Assets tab.

Step 3: Click Add Asset(s), then select Bulk paste assets from the pulldown menu.

Step 4: Paste asset information into the provided box as a return- or comma-separated list.

Step 5: Click Next.

Step 6: PlexTrac will search for assets in the bulk paste that match existing assets and identify them separately from new assets on the Review tab. This provides the option to deselect any assets before import.

Step 7: Click Next.

Step 8: Add any tags (optional). Click Add X assets.

A message confirming import and assets are viewable from the Assets tab will appear.

Importing Assets to Clients

PlexTrac supports asset imports using an NMAP file or a CSV template:

• NMAP files: Network Mapper is a free, open-source network discovery and security auditing utility. More information on NMAP can be found on PlexTrac's Integrations section of this site.

• CSV: PlexTrac provides a template for uploading assets to a client. Click the file below to download the template:

CSV Asset Template Rules

The template is prepopulated with all permitted fields and sample values.

Ports

Column G ingests port information. Once imported, this information is found in the asset's Notes/Description tab.

Multiple values for the ports cell are separated by commas, such as:

22/open/tcp//ssh//OpenSSH 4.3 (protocol 2.0)/, 25/open/tcp//smtp///, 53/closed/tcp//domain///, 70/open/tcp//gopher///, 80/open/tcp//http//Apache http 2.2.3 ((CentOS))/, 113/open/tcp//auth///, 31337/open/tcp//Elite///

Each port can have up to eight values, separated by a slash. This means there must be seven slash characters (/) for each port ingested, even if no data exists within the slashes. If the correct number of slashes is not used, an import error will appear, and the file will not be accepted.

Examples of valid data values for the ports field:

• 80///////

• 80/open//////

• 80/open/tcp/////

• 80/closed/tcp/auth////

• 80/open/tcp/auth/ssh///

• 80/open/tcp/auth/ssh/test 6//

• 80/open/tcp/auth/ssh/test 6/Apache http 2.2.3 (CentOS)/

The first value captures the port number. The second value captures the port status (any ports with a status of Closed will not be imported). The third value captures the protocol. The fifth value captures the service, and the seventh value captures the version.

Importing Assets

Step 1: From the Clients module home page, click the report row or View under the "Actions" column.

Step 2: Click the Assets tab.

Step 3: Click Import assets.

Step 4: Drag a file into the modal or click the box to navigate to the file on the computer.

Step 5: Click Import.

A message will appear confirming import.

The new assets are displayed on the Assets tab. Click View of the imported asset to see imported values.

To view imported port information, click Notes/Descriptions.