Rapid7 Evidence

Incident Command asset definition

Catalog row in Vendor License Evidence · Cited

Kind: FAQ excerpt
Excerpt: "Assets are hosts running a workstation or server operating system to which data has been attributed in the last 30 days. This would include things like servers, desktops, laptops (physical and virtual), point of sales systems, etc."
Locator: Compare SIEM Packages, FAQ "How do you define an asset?"
Applies to: Incident Command and MDR assets are OS hosts with data in the last 30 days
Supports rules: Incident Command and MDR assets are OS hosts with data in the last 30 days
Related metrics: Asset (host with data attributed in last 30 days)
Related programs: Incident Command (Essential, Advanced, Ultimate)
Managed Threat Complete (MDR packages)
Sources: Compare SIEM Packages - Incident Command