SOC Workbench

Asset Security ViewNew

An asset-centric security dashboard that aggregates all security signals for any individual device — Defender alerts, CVE exposure, running processes, active network connections, and patch status — into a single slide panel for rapid device triage.

Get a Demo Login to App

Asset Security View

Per-device security posture at a glance

What it does

Key capabilities

Defender Alert Overlay

See all active Defender alerts associated with the selected device, with severity, status, and timestamp in one view.

CVE Exposure Panel

Every CVE affecting the device — sourced from HakScout and CVE Manager — displayed with CVSS score and remediation status.

Running Processes

Live view of processes running on the device via HakObserver — flagging unsigned, unusual, or high-risk process activity.

Network Connections

Active inbound and outbound connections with destination IP, port, protocol, and threat intelligence enrichment from the TIP.

Patch Status

Current patch level and outstanding updates for the device — integrated with Endpoint Manager compliance data.

Risk Score Summary

Composite risk score for the device derived from alert severity, CVE count, process anomalies, and network exposure.

Highlights

Why Asset Security View?

  • Single-device view aggregating all security signals
  • Defender alerts + CVEs + processes + connections in one slide panel
  • TIP enrichment on network connections for threat context
  • Patch status and compliance data integrated
  • Drill into any signal without leaving the device view
Request Demo Talk to us
Included in OneView

Asset Security View is part of the Hakware OneView platform. All findings, events, and data from this module flow into your central dashboard alongside every other security signal in your environment.

24/7 Support Available
Phone: +27 060 984 1210
FAQs

Frequently asked questions

The Asset Security View slide panel pulls all available security data for the selected device into one view: active Defender alerts, CVE findings from HakScout and CVE Manager, running processes from HakObserver, active network connections with TIP enrichment, and current patch compliance status — all sourced from their respective modules but presented together for the device in focus.

Each active inbound and outbound connection displayed in the panel is checked against the live IOC database in real time. Connections to or from IPs and domains that match known malicious indicators — C2 IPs from Feodo Tracker, phishing domains from OpenPhish, or custom IOCs you have added — are flagged with an IOC match badge and the relevant feed source.

Yes — it is designed for exactly this use case. When an alert fires for a specific device, the analyst can open the Asset Security View for that device and immediately see the full security context: what threats are active, what CVEs are present, what processes are running, and what network connections exist — without opening four separate modules.

The composite risk score combines active alert severity, CVE count weighted by CVSS score, process anomaly count from HakObserver, and network connection threat match count. Devices with high scores across multiple dimensions — for example, several unpatched critical CVEs plus an active Defender detection plus a connection to a known C2 IP — score highest and warrant immediate attention.

Related modules

Alert Triage QueueNew

Unified analyst inbox for every security alert

Learn more

False Positive ManagementNew

Suppress alert noise. Amplify real signal.

Learn more

Threat HuntingNew

Proactive threat hunting across your entire environment

Learn more

See Asset Security View in action

Request a personalised demo and we'll show you exactly how Asset Security View works within your environment.

Request Free Demo All Modules