New Asset Management documentation

[gbossert]

This PR upgrades the documentation of the asset management system to follow its new implementation.
This PR must not be merged before the asset feature is released.

[github-actions]

Pull request was merged, preview was removed.

[github-actions]

Newest code from ka0ula has been published to preview environment

🚀 Latest deployment was built on 2023-09-01 09:48:43 (c84d687eaba19e37c013e6b5a3eb87ce1be38541).

[jeromefellus-sekoia]

Asset matching and detection properties are fundamental features that enhance our system's event correlation and enrichment capabilities. Each asset type comes with a predefined set of detection properties that determine the criteria for matching incoming events with specific assets

Je trouve que les 2 phrases devraient etre inversées. D'abord l'explication de ce qu'est une detection property puis en quoi c'est fondamental.

"enhance our system's event correlation" => j'aurais dit "enhance Sekoia.io's event correlation" , system on sait pas c'est quoi/qui

[jeromefellus-sekoia]

The contextual properties enhance asset management within our system by allowing users to associate additional context and metadata with each asset. These properties provide valuable information beyond the standard asset details, enabling better asset classification and enriched insights into the organization's IT infrastructure.

A contextual property is an additional attribute that can be assigned to an asset to provide more context and details about the asset. It can include any relevant information, such as names, labels, descriptions, categories, or custom identifiers.

pareil j'aurais inversé definition/plebicite

[jeromefellus-sekoia]

Behavioral activity is tracked at the atom level. For instance, even if 192.168.1.2 is associated with various assets over time, events related to this IP address are linked to that specific atom. The weekly activity of a selected atom may be seen in Sekoia.io asset details page

⚠️ Ce n'est pas vraiment vrai : la heatmap d'un asset est basée sur son uuid. Chaque fois qu'on vois cet uuid dans l'evt on a un hit. A une époque lointaine (il y a qques mois humhum) ct basé sur le comptage d'atoms, mais plus maintenant.

[jeromefellus-sekoia]

on pourrait peut etre ajouter une intro à la section "Asset Discovery Rules"

pour expliquer que l'asset discovery repose sur un catalogue de règles (actuellement hardcodées) non ?

il manque la règle "unique host"

[jeromefellus-sekoia]

mais ce sont des détails : tout est super merci 🎉