This feature gives you greater flexibility and control over what gets pulled into Intruder. For example, if you only wanted to add targets from your AWS account tagged prod*, then you can either create a rule, or use the filter function – both are explained below.

Create a rule

  • Head to the Targets page > click on the relevant cloud account > click Settings

  • If CloudBot has not been enabled, toggle the highlighted section to 'on'.

  • Scroll down and click + Create rule

  • Use the dropdown, select one of the options and hit 'Add filter'

Create a filter and convert to a rule

  • Head to the Targets page > click on the relevant cloud account > click + Add filter

  • Use the dropdown, select one of the options and hit + Add filter

  • You can turn this filter into a rule, just click Create rule

Import cloud tags

Now that you've got all the correct targets showing in Intruder, you can import their cloud tags too by toggling 'Auto sync tags' to on.

  • Go to your targets page > click the cloud account > Settings > Toggle 'Auto sync tags' to on:

Automatically Scan Cloud Targets

Keeping track of new instances when they are added to the portal and ensuring you scan them can be time-consuming. To simplify this, we have the 'Auto-scan targets' option, shown in red below.

This allows you to automatically kick off a scan on any new cloud instances that are added to your account, as soon as they are discovered which avoids the need for manual intervention to kick off a scan.

Summary

  • Turn on CloudBot to create rules.

  • Creating a rule means that only assets that adhere to that rule will be added to the Intruder platform; this applies to present targets as well as any future ones that we find.

  • Any assets that don't adhere to the rule, will not be added to the Intruder platform for scanning.

  • Manage rules from Settings

  • If you have manually excluded any assets using the Exclude button, then these will remain excluded from scans.


Note: This feature is only available to users on Pro, Premium and Vanguard users.

Did this answer your question?