I have collections setup for any new assets that meet my query, what is the benefit to having the notification when stuff is removed? Does that imply that the system is offline? Or what triggers that kind of alert? I don’t want to give myself to many alerts to review, but not sure if I am missing something by not turning it on.
Question
Webhook notifications removed?
+2When an asset is removed from a collection’s search results, it means that the scan data that was used to find it in a search is no longer present. Depending on what’s in your query, that could mean that the asset is offline or that the scan data changed from what previously led to it being returned by the query.
Getting notified about a removal can be useful for security work because it can mean that adversaries are moving infrastructure, have changed things about how they compose their infra, and a number of other things. It can be just as useful a starting point for an investigation as an “asset added” alert--but ultimately whether those removals are useful is up to you and how your query is composed.
Sign up
Already have an account? Login
You need a Censys account in order to create a Censys Community account. When you click the button below, you will be redirected to login using your existing Censys credentials. If you do not already have a Censys Community account, you will be prompted to create one after logging into your Censys account.
Log in or register with Censys credentials
Log in to the Censys Community
No account yet? Create an account
You need a Censys account in order to create a Censys Community account. When you click the button below, you will be redirected to login using your existing Censys credentials. If you do not already have a Censys Community account, you will be prompted to create one after logging into your Censys account.
Log in or register with Censys credentials
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.