- Get asset attribution details.
- Set an end date for the association.
Assets are attributed to an organization by matching names and/or the email addresses associated in the record with a legal entity. This is done and maintained using the following processes:
- Collection: Custom tooling is used to search and identify email addresses in RIR databases that match domains curated for the organization.
- Curation: Human curators validate the collected assets. Curation is critical to assure accurate attribution of assets.
- Automation: After the initial mapping, automation tools continuously analyze asset evidence. Assets are automatically added to and removed from organizations based on definitive evidence. If the evidence gathered during collection is removed from an RIR record, the CIDR block is end-dated from the organization’s assets and new findings will no longer be associated with the organization.
Example: An RIR record listing “BITSIGHT” is attributed to the “Bitsight Technologies” legal entity.
Actions
Action | Instructions |
---|---|
Apply infrastructure tags: |
|
Bulk actions: |
|
Create custom infrastructure: |
|
Customize the included data: | Select Customize columns at the top-right of the table. |
Download attribution data (.csv): | Select Download CSV at the top-right of the table. |
Filter the data: | Use the filters on the left. |
Remove infrastructure: |
|
Fields
Any noise is filtered so only the data that are indicative of the organization’s control of that asset are displayed.
Example: Border Gateway Protocol (BGP) advertisements of some CIDR might stop from time to time. It’s a quirk of BGP that’s not indicative of the control of that CIDR.
Field | Description |
---|---|
AS Number❖ |
Autonomous System Numbers (ASN) that are assigned to a company. Applicable only for IP Addresses/CIDRs. |
Attributed To | The attributed entity. |
CIDR Size | The number of IP addresses in the CIDR block. |
Country |
The location of the asset using an IP geolocation database. Hostnames are located at the location connected with the IP address that they resolve to. Depending upon the information available to the location service, some locations are precise, others are defaulted to the geographic center of a country. |
End Date | The date when infrastructure is no longer attributed (inactive). |
Is Active | The status within the Bitsight inventory. |
Source |
The source used to associate the infrastructure with the company; The reason why an IP or CIDR has been attributed to your organization. If the source was not customer-provided or is custom infrastructure, select the asset to view more details; such as the organization’s name or the email associated with registration. Applicable only for IP Addresses/CIDRs. |
Start Date | The date when infrastructure is first attributed (active). |
Tags | Infrastructure tags. Use the Add button to tag an asset. |
Value | The associated asset (IP address, CIDR block, or domain). The User indicates an asset is company-provided. |
Filters
Filter | Values |
---|---|
Attributed To | Your My Company or your SPM Subsidiary. |
Country |
|
End Date |
Select a range when attribution ended within the last:
|
Is Active |
|
Source |
|
Start Date |
Select a range when attribution started within the last:
|
Tags |
|
Type |
|
Infrastructure Information
Select an asset to see the following infrastructure information:
Field | Description | |
---|---|---|
Attribution | Attribution reasons of a Bitsight-curated asset. | |
Attribution Info | The attribution reason. | |
CIDR | The CIDR range if the asset is an IP address. | |
DNS Hostname | The DNS hostname if the asset is an IP address. | |
Information Link | The WHOIS record in the registry if the asset is a domain. | |
Tags | Infrastructure tags assigned to the asset. |
- September 26, 2024: No longer in beta; Available actions; Updated filters.
- November 21, 2023: Has Delegated Controls field.
- December 14, 2022: New Infrastructure Information section.
Feedback
0 comments
Please sign in to leave a comment.