Asset Manager accesses the API of Carbon Black (at a polling interval set by the user) and retrieves the inventory of hosts, servers, and other endpoint systems ("Carbon Black managed endpoints").

Asset Manager correlates this inventory against Asset Manager's authoritative index of IP address space- comparing to advise Carbon Black of any devices where it doesn't see a Carbon Black endpoint indicated on the device, as those would be "undefended/unmanaged" endpoints.

Asset Manager highlights the differences and commonalities into views:

• Asset Manager Only IPs: IP addresses Asset Manager knows about, but are unmanaged by Carbon Black
• Carbon Black Only IPs: IP addresses Carbon Black knows about, but are unknown to Asset Manager (e.g., if Asset Manager does not have access to a network or an off-network device, but Carbon Black is still aware of the client agent)
• Carbon Black and Asset Manager Managed IPs: IP addresses both Asset Manager and Carbon Black know about.