Viewing asset details

Asset details are a window that contains all information related to the asset.

You can view asset details in one of the following ways:

• From alert details
• From incident details
• From event details (if the event contains assets)
• From an investigation graph

To view asset details:

1. In the main menu, go to Monitoring & reporting, and then do one of the following:
   • If you want to view asset details from alert details, click Alerts, and then in the ID column, click the ID of the alert that includes the asset whose details you want to view. In the window that opens, go to the Assets tab.
   • If you want to view asset details from incident details, click Incidents, and then in the ID column, click the ID of the incident that includes the asset whose details you want to view. In the window that opens, go to the Assets tab.
   • If you want to view asset details from event details, click Threat hunting, and then click the event that contains the asset whose details you want to view.
   • If you want to view asset details from an investigation graph, click Incidents, and then in the ID column, click the ID of the incident that includes the asset whose details you want to view. In the window that opens, click the View on graph button. Click the alert node, and then in the context menu, select Devices or Users.
2. Do one of the following:
   • Click the name of the required asset, and then in the drop-down list, select View properties.
   • On the investigation graph, click the asset node, and then in the context menu, select View details.

The asset details window is displayed.

The asset details window contains the following sections:

• Asset properties—Information about the asset, for example, asset name, ID, and tenant to which the asset belongs.

  If the current license in KUMA includes the AI module, the AI score field is displayed and shows the asset score. This field shows the degree of atypical activity on the asset and may take the values in the range from 0 to1, where 0 is expected behavior, and 1 is completely unexpected behavior for the asset within the infrastructure.

• Categories—Information about the categories associated with the asset.
• Custom fields—Asset fields that you created in KUMA Console.
• Installed software—Information about software installed on the asset.
• KSC: vulnerabilities—Vulnerabilities of the asset, if provided. This information is available for assets imported from Kaspersky Security Center.
• Kaspersky applications—Information about the Kaspersky applications installed on the asset.
• Device protection status—Status of the asset; the following values are possible: OK, Critical, Warning. This information is available for assets imported from Kaspersky Security Center.
• KICS for Networks: asset properties—Information about the asset. This information is imported from KICS for Networks.
• KICS for Networks: vulnerabilities—Vulnerabilities of the asset, if provided. This information is available for assets imported from KICS for Networks.

You can expand the sections by clicking the chevron icons () next to their names.

Page top