watchTowr

The watchTowr platform provides Continuous Automated Red Teaming (CART) and Attack Surface Management (ASM) to help businesses discover high-impact vulnerabilities.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Vulnerabilities
• SaaS Applications
• Containers
• Object Storage
• Application Resources

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the watchTowr server.

2. API Key (required) - An API Key associated with a user account that has permissions to fetch assets.

3. Business Unit IDs (optional) - The business unit IDs for which to pull the data.

4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

5. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

6. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

7. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

• Endpoints Config - By default the adapter enriches users via various endpoints. Click on > to open the following settings for configurable endpoints.
  Note: When any of the settings are enabled, the following setting can be configured:

  • Fetch Cloud Storage in the last X days (optional, default: 15) - Specify the number of days back to fetch Cloud Storage.
    
    
  1. Fetch Devices of sub type ip_address from IP Addresses Endpoint (default: true) - By default this adapter fetches devices of the subtype 'ip_address' from the IP Addresses endpoint. Toggle off to not fetch devices of the subtype 'ip_address' from the IP Addresses endpoint.
  2. Fetch Devices of sub type domain from Domains Endpoint - By default this adapter fetches devices of the subtype 'domain' from the Domains endpoint. Toggle off to not fetch devices of the subtype 'domain' from the Domains endpoint.
  3. Fetch Devices of sub type subdomain from Subdomains Endpoint - By default this adapter fetches devices of the subtype 'subdomain' from the Subdomains endpoint. Toggle off to not fetch devices of the subtype 'subdomain' from the Subdomains endpoint.
  4. Fetch ObjectStorage from Cloud Storage Endpoint - Toggle on to fetch ObjectStorage from the Cloud Storage endpoint.
  5. Fetch Containers from Containers Endpoint - Toggle on to fetch Containers from the Containers endpoint.
  6. Fetch ApplicationResources from Repositories Endpoint - Toggle on to fetch ApplicationResources from the Repositories endpoint.

APIs

Axonius uses the watchTowr Platform Client API.

Supported From Version

Supported from Axonius version 6.0