When you first activate cognitix Threat Defender in your network, the automatic discovery of assets is enabled by default. This means, Threat Defender automatically learns the MAC addresses of the detected devices in the network and creates individual assets for them in the internal database. In this process, it collects metadata for the assets, such as the operating system used.

To make the best use of this asset database you need to consolidate it manually by assigning the automatically discovered assets to individual devices or classes of devices. In this process, you can assign meaningful names and organize the assets in domain-specific groups using asset tags.

Once you have a stable network inventory you can easily handle newly discovered assets using pre-defined asset tags and rules.