{"id":588,"date":"2022-01-03T17:12:14","date_gmt":"2022-01-03T22:12:14","guid":{"rendered":"https:\/\/secognition.com\/?p=588"},"modified":"2022-01-03T17:12:14","modified_gmt":"2022-01-03T22:12:14","slug":"how-to-start-an-asset-inventory","status":"publish","type":"post","link":"https:\/\/secognition.com\/?p=588","title":{"rendered":"How to Start an Asset Inventory"},"content":{"rendered":"

At the top of most lists to better secure your network is to have an up to date inventory of physical and virtual assets connected to your network.\u00a0 Most security controls frameworks have as their most fundamental controls to implement.\u00a0 For corporations with mature procurement processes this is easier, but what about a home user or small or medium business?\u00a0 It’s one thing to have a list but how often is it updated?\u00a0 How can this be automated?\u00a0 Can I get alerts if a new device is detected?<\/p>\n

Below I’ll try to help out with some pointers and outline my journey to an asset inventory.<\/p>\n

At it’s most basic level you can get away with a Microsoft Excel spreadsheet that outlines the following high level criteria:<\/p>\n

\"\"<\/p>\n

 <\/p>\n

The Center for Internet Security has a free template that can be used at the following Link<\/a><\/p>\n

Naturally, filling our a spreadsheet and keeping it up to date can be daunting.\u00a0 You fill it out once and give yourself a pat on the back for doing it, but…. do you really want to get into the habit of updating it every time something new pops up.\u00a0 Imagine 10s or 100s of new things, not to mention things that get lost.\u00a0 This manual approach does not scale well.<\/p>\n

What else can be done?<\/h3>\n

Glad you asked.\u00a0 There are a multitude of tools, free and not so free that keep trying to do something about this.\u00a0 In my own small network, I’ve used the following.<\/p>\n

I’ve had great success with https:\/\/rumble.run<\/a>.\u00a0 There’s a free tier called the Rumble Starter Edition where you can scan up to 1024 IPs but will track 256 live assets at this tier.\u00a0 More than enough for a small network.\u00a0 One of the big pluses is that I don’t need to install a client software on each individual machine.\u00a0 The fingerprinting function on the rumble client is really good and constant updates have brought many more device types into the fold.<\/p>\n

Steps to get going:<\/p>\n