Secure data collection from an air-gapped network

A system, comprising:

• one or more processors configured to:
• collect configuration item data from information technology resources of an air-gapped network for an information technology configuration management database;
• filter the collected configuration item data using a specified item data property including by being figured to automatically identify a collected information of interest about a discovered information technology asset among the collected configuration item data and irreversibly modify the collected information of interest about the discovered information technology asset included in the collected configuration item data;
• based on a type of content that has been modified in the collected information of interest, determine a new automatic rule indicating the type of content to be avoided during a future data collection;
• and
• store at least a portion of the filtered collected configuration item data on a portable physical storage medium within the air-gapped network;
• and
• a memory coupled to at least one of the one or more processors and configured to provide at least one of the one or more processors with instructions.

A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:

• collecting configuration item data from information technology resources of an air-gapped network for an information technology configuration management database;
• filtering the collected configuration item data using a specified item data property including by automatically identifying a collected information of interest about a discovered information technology asset among the collected configuration item data and irreversibly modifying the collected information of interest about the discovered information technology asset included in the collected configuration item data;
• based on a type of content that has been modified in the collected information of interest, determining a new automatic rule indicating the type of content to be avoided during a future data collection;
• and
• storing at least a portion of the filtered collected configuration item data on a portable physical storage medium within the air-gapped network.