Assets

Assets

Assets represent the systems, applications, and infrastructure that are targets of your security assessments. NEURO provides comprehensive asset management to track what you’re testing and link findings to specific systems.

Overview

An asset in NEURO can be:

• IP addresses and ranges
• Hostnames and domains
• Web applications
• Mobile applications
• Network devices
• Cloud resources
• APIs and services

Asset Properties

Each asset includes:

Property	Description
Name	Descriptive identifier
Type	Category of asset
IP Address	Network address
Hostname	DNS name
Ports	Open ports/services
OS	Operating system
Status	Testing status
Notes	Additional information

Asset Types

Type	Examples
Server	Web servers, database servers
Workstation	Employee computers
Network Device	Routers, switches, firewalls
Web Application	Websites, web apps
Mobile Application	iOS/Android apps
API	REST/SOAP endpoints
Cloud Resource	AWS, Azure, GCP resources
IoT Device	Smart devices, embedded systems
Other	Custom categories

Viewing Assets

Project Assets

1. Open a project
2. Navigate to Assets tab
3. View all assets for that project

Asset List Features

• Search by name, IP, hostname
• Filter by type, status
• Sort by any column
• Bulk selection

Adding Assets

Manual Entry

1. Go to project Assets tab
2. Click + Add Asset
3. Fill in asset details:
   • Name (required)
   • Type
   • IP Address
   • Hostname
   • Ports
   • Operating System
   • Notes
4. Click Save Asset

Nmap Import (Recommended)

Import assets discovered by Nmap:

1. Click Import from Nmap
2. Upload your Nmap XML file
3. Review discovered hosts:
   • IP addresses
   • Hostnames
   • Open ports
   • Services
   • OS detection
4. Select assets to import
5. Click Import Selected

Tip

Run Nmap with -oX output.xml to generate compatible XML files. Include -sV for service detection and -O for OS detection.

Nessus Import

Import assets from Nessus scans:

1. Click Import from Nessus
2. Upload Nessus export file (.nessus)
3. Review discovered assets
4. Import selected assets

CSV Import

Bulk import via CSV:

1. Click Import → CSV
2. Download the template
3. Fill in your asset data
4. Upload the completed CSV
5. Map columns to fields
6. Import assets

CSV Template columns:

name,type,ip_address,hostname,ports,os,notes
Web Server,Server,192.168.1.10,web.example.com,"80,443",Ubuntu 22.04,Primary web server

Editing Assets

1. Click on an asset row
2. Click Edit or double-click
3. Modify fields
4. Click Save Changes

Quick Edit

For rapid updates:

1. Double-click a cell
2. Edit the value inline
3. Press Enter to save

Asset Status

Track testing progress:

Status	Description
Not Tested	Initial state
In Progress	Currently testing
Tested	Assessment complete
Out of Scope	Excluded from testing

Update status:

1. Select asset(s)
2. Click Status dropdown
3. Choose new status

Linking Findings to Assets

Associate vulnerabilities with affected systems:

From Finding

1. Open or create a finding
2. Go to Affected Assets section
3. Search and select assets
4. Save the finding

From Asset

1. Open asset details
2. View Related Findings
3. Click + Link Finding
4. Select finding(s)

Asset Details View

Click an asset to see full details:

Overview

• All asset properties
• Quick stats
• Last modified

Findings

• Vulnerabilities affecting this asset
• Severity breakdown
• Finding status

Ports & Services

• Detailed port information
• Service versions
• Protocol details

History

• All changes to the asset
• Import history
• Status changes

Bulk Operations

Perform actions on multiple assets:

1. Select assets using checkboxes
2. Click Bulk Actions
3. Choose action:
   • Update status
   • Update type
   • Add tags
   • Delete
   • Export

Asset Tags

Organize assets with tags:

1. Select asset(s)
2. Click Tags
3. Add or remove tags

Common tags:

• Environment (Production, Staging, Dev)
• Network segment (DMZ, Internal, External)
• Priority (Critical, Standard)
• Owner (Team, Department)

Exporting Assets

Export to CSV

1. Go to Assets tab
2. Apply filters if needed
3. Click Export → CSV

Include in Report

Assets are automatically included in reports:

• Asset inventory section
• Findings by asset
• Asset statistics

Asset Discovery Tips

Nmap Scanning

# Basic discovery
nmap -sn 192.168.1.0/24 -oX hosts.xml

# Full scan with services
nmap -sV -sC -O -p- 192.168.1.0/24 -oX full_scan.xml

# Web-focused
nmap -sV -p 80,443,8080,8443 192.168.1.0/24 -oX web.xml

Import Best Practices

• Import assets at project start
• Update after each scan phase
• Verify hostname resolution
• Document out-of-scope systems

Deleting Assets

Caution

Deleting an asset removes all its associations with findings. The findings themselves are preserved.

1. Select asset(s)
2. Click Delete
3. Confirm deletion

---

Next: Learn about Report Generation