Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Alerts when a new asset is registered in XBOW for the first time. This is detected by matching assets whose CreatedAt timestamp falls within the current query window, indicating the asset was newly added rather than updated. This helps track shadow IT, new deployments, and any unexpected expansion of the external attack surface.
| Attribute | Value |
|---|---|
| Type | Analytic Rule |
| Solution | XBOW |
| ID | e4c6a8b2-9d7f-4285-a1e3-6b9c2e4f1a85 |
| Severity | Medium |
| Status | Available |
| Kind | Scheduled |
| Tactics | Reconnaissance, Discovery |
| Techniques | T1595 |
| Required Connectors | XbowSecurityConnector |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
XbowAssets_CL |
? | ✓ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊