Using the Tenable.SC API to list Asset Groups for a list of IPs

I recently needed to pull all of the asset groups associated with a list of IPs from Tenable.SC. It’s easy enough to filter assets in Tenable.SC by Asset Group and get all of the assets in a group. And the full list of Asset Groups can be viewed in the Web UI by looking at the information for a single asset. But there was no report or query within the Web UI that would list all Asset Groups for list of IPs/assets.

Enter the Tenable.SC API. Within the API, there is a method called “assetintersections” that will list all Asset Groups associated with a given IP.

https://docs.tenable.com/tenablesc/api/Repository.htm#RepositoryRESTReference-/repository/{id}/assetIntersections

With a little scripting in your favorite language, a list of IPs and their associated Asset Groups can be created.