Overview
Nucleus enables you to sync your Assetnote external surface monitoring data directly from Assetnote into the Nucleus console using an automated connector. The connector uses the APIs provided by Assetnote to seamlessly sync data into various Nucleus projects for use in analysis, triage, automation, and reporting.
Connector Setup
- From within your Assetnote account, create an API Key and copy it to your clipboard or a note.
- Navigate to Integration Hub > Connectors Setup
- Navigate to the Asset Inventory section and click the Assetnote icon.
- In the Create Assetnote Connector popup, enter the following:
| Field | Description |
|---|---|
| Name | Name to identify the connector in Nucleus |
| Description | Optional description to add some details about the connector for other users |
| Instance URL | URL to your base Assetnote instance |
| API Key | The API Key you created and copied in step one |
- Click Verify Credentials and wait for the Success message.
- Select if/how you want tags in Assetnote imported into Nucleus as nested asset groups.
- Click Save & Finish and wait for the Success message.
Import Exposures
- Go to Integration Hub > Import via Connector.
- Select the Assetnote connector you just created.
- Select the Assetnote asset groups that you want to import exposures from.
- Click your preferred import option at the bottom of the page.
- Once the Assetnote asset group is finished importing, visit the Data Ingest > Import History page to view the results.
Importing exposures via this method will only ingest and create assets if exposures exist on them. To synchronise all assets, follow the steps in the section Synchronise Assets.
Synchronise Assets
- Go to Automation.
- On the Asset Inventory Sync tab, click *Add Rule.
- Enter a rule name, select the Assetnote connector you just created and click Next.
- Select the Assetnote asset groups that you want to synchronise assets from.
- Click to Save & Finish.
Assets synchronise every 24 hours and can take up to 15 minutes to complete, depending on the number of assets in each asset group. To trigger an immediate sync, click the Sync Now button in the Actions column.
Push data from Assetnote
See this link for the steps to follow to set up the real-time push integration from Assetnote to Nucleus.
Exposure Status Mapping
Nucleus intelligently maps statuses in Assetnotes to equivalent statuses in Nucleus. See below for how statuses are mapped:
| Status in Assetnote | Status in Nucleus |
|---|---|
| Discovered | Active |
| Triage (Initiated, Unresolved & Action) | In Progress |
| Triage Resolved | Mitigated |
| Ignore (Initiated & Action) | False Positive |
Exposure Severity Mapping
Nucleus maps the severity from Assetnote to exact severity in Nucleus i.e. critical to critical, high to high, and so on. If the severity of a finding is adjusted manually on the Assetnote side, that will take precedence over the original severity.
In case the vulnerability has multiple instances the unfiltered vulnerability will show the severity of the most recent ingested instance.
Frequently Asked Questions
What additional metadata is populated?
The following additional metadata is set on assets ingested from Assetnote:
| Key | Source |
assetnote.asset-type | assetType |
| assetnote.active-a-records | activeARecords (edge field is ipAddress on ADnsRecord) |
| assetnote.active-cname-records | activeCnameRecords (edge field is subdomain on CnameDnsRecord) |
| assetnote.asn-organizations | asnOrganizationName |
| assetnote.asn-numbers | asnNumber |
| assetnote.asn-networks | asnNetwork |
| assetnote.exposure-rating | exposureRating |
| assetnote.exposure-rating-description | exposureRating |
If you have any questions, please contact us through the support center.