Autobahn is a web-based tool for having assets managed in it checked with different automated “scanners”, processing the results, making progress measurable/presentable and even assigning tasks. Depending on the intended use, it may not be useful to use all of these features within Autobahn. Especially in the context of this cohort, we will focus on scanning (the task of int³), the results and the progress, while task assignment to cohort members is done via internal tools if necessary.
In the left sidebar, you will find the three levels of Autobahn that we can work with, or rather, that allow us to see our assets and tasks.
The unique feature of Autobahn is the workouts, and we will work primarily with these later. But let's start with the other two first: assets and issues.
Under Assets we find a table of all assets previously imported during onboarding. These may already have been deduplicated (e.g. if a specified domain resolves to an IP that is also listed). Also displayed under Source is whether these assets were independently “found” by Autobahn or manually, when this asset was last scanned, who is responsible for this asset and how the most severe issue that can be assigned to this asset is assessed.
Asset-Overview showing sample data
The asset overview is therefore already filled in even if there are no scans yet. Once these have been carried out, we can view the results under issues. Here we will see individual issues, i.e. a very long list in which each instance of each problem is listed separately. Often, you will work with workouts which we’ll introduce later instead of this list. But sometimes it makes sense to look at the individual issues separately, for example, when the same problem occurs multiple times, but the respective systems are managed by different people and are at different stages of progress.
Individual Issues mit Beispieldaten
Let's now move on to the heart Autobahn, the workouts. Workouts combines issues sharing the same solution steps into one. This both streamlines working on issues themselves, due to the sheer reduction of the initial list, but also help actively fix problems. Say:
In the Workouts overview, we only see what we really need to do – not the causal findings.
Workout overview showing sample data
If we open a specific workout, we can then see the corresponding steps and are also guided through various options. These are technical and can be forwarded directly to the jwg staff. For this purpose, there is also an option to download/export as a PDF.
Sample workout for SSH hardening
Under Setup, we can also see which of the individual Issues on which Assets are being resolved by this Workout.
<aside> ℹ️ However, since workouts involve a lot of manual work by Autobahn & intcube, it is possible that there is no workout for all emerging issues. In this case, please contact us directly and we will work with you to find a solution and also work to integrate it into Autobahn.
</aside>