Frequently Asked Questions (FAQ)

General

What makes CoreSight different from a network scanning tool?

CoreSight is not an active network scanner (like Nmap or Nessus). It is an aggregation, visualization, and analysis platform. It ingests data from your scanners, directories, and inventory tools to create an interactive cartography, evaluate global risks, and generate compliance reports.

Does CoreSight need internet access?

No. CoreSight is designed to work in a completely isolated (Air-Gapped) environment. The only feature requiring external access is the automatic update of CVEs from the NIST NVD (if configured). You can easily import CVEs manually via JSON files.

Cartography

Why do my assets disappear when I select one?

This is the normal behavior of the "Focus" mode. When an asset is selected, the cartography hides non-connected nodes to highlight the direct dependencies of the targeted asset. Click in an empty space to deselect and show the entire map again.

How to link multiple devices quickly?

Use the Security Zone mode. Create a zone, then drag and drop your devices inside it. You can then create a relationship between another zone (or an external asset) and the zone you just created. The flow will logically apply to all members of the zone.

Administration and Deployment

I lost the administrator password, what should I do?

Check the Troubleshooting guide. A command-line procedure allows you to reset the password directly in the database in an encrypted manner.

Can I install CoreSight on Windows?

The backend server and database require a Linux environment (Ubuntu, Debian, CentOS, RHEL, etc.) due to systemd process management and native dependencies (better-sqlite3). However, the client interface (the dashboard) is accessible from any browser on Windows, macOS, or Linux.

Where are the database files located?

By default (on-premise installation), the files are located in: /opt/coresight/server/data/ The main file is coresight.db. Remember that it is encrypted and requires the DB_ENCRYPTION_KEY present in /opt/coresight/server/.env to be read.