Generate the Infrastructure Changes Report (.csv)

The Infrastructure Changes report (.csv) shows changes in your organization’s infrastructure and details about the change. This report promotes accountability, facilitates issue resolution and compliance, and ensures that your rating accurately reflects your security posture. Use this report to:

• Get insights into the timeline, nature, and source of infrastructure changes.
• Track and monitor changes in your organization’s infrastructure, including IP addresses and domains.
• Stay informed about existing and newly added infrastructure elements.
• Set up an effective infrastructure management process.

Instructions

1. Open the Reports page in the SPM app.
2. Locate the Infrastructure Changes card.
3. Mouseover the card and select Create.
4. Select the time of the infrastructure change on the Options card
5. Select one or more company from the list. You can use the available filters or the search field to quickly find a specific company.
6. Select the Infrastructure Type tab. Use the checkboxes to select what type of infrastructure to include in the report. You may choose from IP Address or Domains.
7. Select the Change Type. Use the checkboxes to select what type of infrastructure to include in the report. You may choose from Addition, Expiration, Removal, and Renewal.
8. Select View to generate the report.

Once generated, you can edit, save, schedule, Quick Share, or download the report as a CSV.

Recommendations

• Schedule this report to get alerted when new infrastructure is added into your attack surface.
• Collaborate with other teams to verify the data as you track your externally exposed attack surface.
• Leverage this data within your business intelligence tool to merge with other data for more advanced analysis.

Good to Know

There are some sources used for infrastructure attribution whose changes are not currently shown in the changes table, namely BGP advertisements and DNS.

Fields

• Change Type: The type of change, whether it’s an addition or removal.
• Company: The organization or company related to the infrastructure change.
• Country: The country associated with the infrastructure change.
• Change Date: The date when the infrastructure change occurred.
• Start Date: The date when the change was initiated.
• End Date: The date when the change was completed or ended.
• Infrastructure: The specific IP address, domain, or network range associated with the change.
• Source: The source or origin of the change.