Asset inventory records

Name: Asset inventory records
Creator: TestPattern Community
License: https://opensource.org/licenses/MIT

Detects IT asset inventory records: asset register/inventory wording with populated asset tags, serial numbers, hostnames, MAC/IP addresses and owners. Topic wording alone is discovery-only.

Type: regex
Engine: boost_regex
Confidence: medium
Confidence justification: Medium confidence: the topic phrase alone is discovery-only; enforcement needs populated structure (a populated asset field (asset tag, serial, hostname, model, MAC, IP, assigned owner, location, OS) or an inventory column header or a device artefact (MAC address, IPv4, internal hostname)), and 85 needs two distinct structures plus independent asset-lifecycle (EOL, warranty, device class) evidence, so policies, blank forms and training text stay below 75.
Detection quality: Topic false positive
Jurisdictions: global
Regulations: Security of Critical Infrastructure Act 2018 (Cth)
Frameworks: ISO 27001, NIST CSF, CIS Controls
Data categories: security
Scope: wide
Risk rating: 8
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?i)\b(?:(?:IT|ICT|hardware|software)\s+asset\s+(?:inventory|register)|asset\s+(?:inventory|register)(?:\s+export)?|hardware\s+inventory|software\s+inventory)\b

Corroborative evidence keywords

end of life, warranty, lifecycle, decommissioned, in service, laptop, server, workstation, firewall, switch

Proximity: 300 characters

Should match

The asset register will be reconciled against the CMDB next quarter. — Discovery probe (65)
IT asset register extract Asset tag: HB-004471 Serial number: 5CG2141XYZ — Medium-tier probe (75) - populated asset fields
IT asset register extract - Finance floor Asset tag: HB-004471 Hostname: ws-fin-114 Serial number: 5CG2141XYZ MAC address: 3C:52:82:1A:9F:04 IP address: 10.20.4.17 Assigned to: A. Teston - laptop, warranty expires 30/06/2027, end of life 2028. — High-tier probe (85) - several asset fields, MAC/IP artefacts and lifecycle context

Should not match

unrelated generic text — No relevant phrase context
placeholder value 12345 — Random text should not match
Policy statement: all ICT equipment is recorded in the asset register when received. — Policy text
Asset register template Asset tag: ________ Serial number: [insert] Hostname: ________ — Blank template
Course module 2: an asset inventory records the asset tag, serial number and MAC address of each laptop. — Training framing

Known false positives

Financial fixed-asset registers (furniture, vehicles). Mitigation: Enforcement needs IT asset fields or device artefacts; 85 also needs device lifecycle context.