assets
Assets represent a local, physical system, and can be composed of one or more nodes.
| name | Name of the node (Note: This field is automatically assigned by Guardian based on the most reliable available information, such as: address, network qualified names, nodes' assigned labels, etc.) |
| level | The purdue-model level of the asset |
| appliance_hosts | The hostname(s) of the sensor(s) where this entity has been observed |
| capture_device | Name of the interface from which this entity has been detected |
| ip | internet protocol (IP) address(es) of the asset. It can be either IPv4, IPv6 or empty (in case of L2 node) |
| mac_address | media access control (MAC) address(es) of the asset. It can be missing in some situations (serial nodes) |
| mac_address_level | (for internal use) |
| vlan_id | The virtual local area network (VLAN) identifier (ID)(s) of the asset. It can be absent if the traffic to/from the node is not VLAN-tagged |
| mac_vendor | MAC address vendor(s). Is not empty when the MAC address is present and the corresponding Vendor name is known |
| os | Operating System of the asset, if available. This field is not present when the firmware_version is available |
| roles | The set of application-level roles of the asset. Differently from the type, these are behaviors |
| vendor | Vendor of the asset |
| vendor:info | This is a metadata field about the vendor field |
| firmware_version | The firmware version of the asset. The field is not present when the os field is available |
| firmware_version:info | This is a metadata field about the firmware_version field |
| os_or_firmware | Since os and firmware cannot be present at the same time, this field allow to get either of the two in a coalesce-like manner |
| serial_number | The serial number of the asset |
| serial_number:info | This is a metadata field about the serial_number field |
| product_name | The product name of the asset |
| product_name:info | This is a metadata field about the product_name field |
| type | The type of the asset |
| type:info | This is a metadata field about the type field |
| protocols | The unique protocols used from and to this asset |
| nodes | The set of node id(s) that compose this asset |
| custom_fields | Any additional custom field defined in the Custom fields |
| device_id | (Internal use) |
| is_ai_enriched | This field is true if this asset has been enriched by Asset Intelligence |