Skip to main content

Attack Surface InsightsAttack Surface Insights Guide

Table of ContentsTable of Contents

Get Started with Attack Surface Insights
Configure Attack Surface Insights
- Restrict Entity Creation
  - Pre-Built Enrichment Rules Restricting Entity Creation
  - Restrict Entity Creation Using a Custom Enrichment Rule
- Custom Linking for User Entities
  - Apply Custom Linking Updates to an Existing User Entity
Search for Entities in Attack Surface Insights
- Build a Search in Attack Surface Insights
- Enter a Search in Attack Surface Insights
View Entities in Attack Surface Insights
Manage Entities in Attack Surface Insights
- Edit Entities in Attack Surface Insights
  - Manually Edit Entities in Attack Surface Insights
  - Automatically Edit Entities in Attack Surface Insights
- Delete Entities in Attack Surface Insights
  - Delete an Entity
  - Delete Multiple Entities
Entity Attributes
- User Entity Attributes
- Device Entity Attributes

Configure Attack Surface Insights

Configure and tune how Attack Surface Insights works. Customize how Attack Surface Insights creates and links entities.

Before you configure Attack Surface Insights, ensure that you understand how Attack Surface Insights works and how linking works.

Restrict Entity Creation
Restrict Attack Surface Insights from creating entities from events you specify.
Custom Linking for User Entities
Control how Attack Surface Insights links accounts to user entities using the pre-built User Entity Links context table.