What are primary and secondary assets?
1 min
question hexiosec asm has a concept of assets either being classed as primary or secondary what does this mean and how is it determined? answer hexiosec asm uses 'primary' and 'secondary' to describe the relationships back to seed domains and ip addresses since everything on the internet is connected, we need to ensure the results of a hexiosec asm scan are appropriately focussed screenshot showing an example domain on the left, with the graph image showing connections on the right a domain (or ip) will be a 'primary' asset if it is connected back to one of the seed nodes via a valid path a subdomain (or child) of a seed domain will be a 'primary' asset however, the domain of a 3rd party service aliased (dns cname'd) from a primary domain, or a subdomain for a different website found in a certificate would both be 'secondary' assets for example, if an organisation uses microsoft for emails it would have an 'autodiscover' subdomain such as 'autodiscover example com', which has an alias to 'autodiscover outlook com' hexiosec asm would mark these domains as 'autodiscover example com' primary 'autodiscover outlook com' secondary for more information please read managing domains and ips docid\ bqvbkw1h6tebn9j5bywrj