Search documentation

…iversal controls — the actual security practices that matter, such as MFA enforcement, patch cadence, endpoint protection and access review — and maps each one to the specific lang…

…se The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, conditional access posture,…

Overview Browsing, filtering and reviewing evidence records. Documentation status This article is a concise reference. A fully expanded guide for “Evid…

Overview Bundling evidence with hashes for assessors. Documentation status This article is a concise reference. A fully expand…

Overview Read control results and post manual evidence. Documentation status This article is a concise reference. A fully expanded guide for “Controls and…

Overview AIQ-EVD-004 / AIQ-EVD-005 — failed or stale evidence collection. Documentation status This article is a concise reference. A fully expanded guide for “E…

…is article is a concise reference. A fully expanded guide for “Manual Evidence” is scheduled in the documentation roadmap; the steps below are accurate for the current product vers…

…s article is a concise reference. A fully expanded guide for “Linking Evidence to Controls” is scheduled in the documentation roadmap; the steps below are accurate for the current…

…article is a concise reference. A fully expanded guide for “Automatic Evidence” is scheduled in the documentation roadmap; the steps below are accurate for the current product vers…

…ogy graph of edges from them, each edge keeping a pointer back to the evidence that produced it. Protocol What it proves Verified? LLDP / CDP Direct physical adjacency reported b…

Overview Hashing, append-only versions and tamper evidence. Documentation status This article is a concise reference. A fully expanded guide for “Evidence Int…

…tner, customer, site and asset hierarchy; collectors, connectors, the evidence store and tenant isolation. Documentation status This article is a concise reference. A fully expan…

…ident: mark, assess, revoke sessions, lock, retire, rotate, validate, evidence, controls, report. Documentation status This article is a concise reference. A fully expanded guide…

Overview Privileged accounts, MFA coverage, legacy auth and stale identities. Documentation status This article is a concise reference. A…

Overview How evidence quality, freshness and source produce the confidence score. Documentation status This article is a…

…atus This article is a concise reference. A fully expanded guide for “Evidence Timeline” is scheduled in the documentation roadmap; the steps below are accurate for the current pro…

…roup membership and legacy protocol exposure alongside cloud identity evidence. Requirements A domain-joined Windows host or the AssurIQ collector reachable to a domain control…

…ling to collect firewall policy, VPN, firmware and interface exposure evidence — the same data source behind the KEV SSL-VPN attack-surface storyline. Requirements FortiOS 7.x…

…le to collect firewall policy, threat prevention, App-ID and firmware evidence, including Panorama-managed estates. Requirements PAN-OS 10.x+ (firewall or Panorama) with API ac…

…d management AIQ-AC-001, AIQ-AC-002, AIQ-ID-001 Privileged access and MFA AIQ-ID-004, AIQ-ID-006 Audit controls / monitoring AIQ-MO-001, AIQ-MO-002 Endpoint and system integrity AI…

…tage actually means. The six states State Definition PASS Current evidence confirms the control is operating as required PARTIAL The control is in place but with a known gap, i…

…REST API package or SNMP, supporting exposure and configuration-drift evidence for small and mid-size sites. Requirements pfSense 2.6+ or pfSense Plus with the REST API package…

…erability Sensor, Security Sensor, Threat Sensor, Response Engine and Evidence Engine — each negotiated by key and version at heartbeat. Agents that do not report capabilities keep…

…er Integrations. Confirm collection Verify firmware, license and rule evidence populate on the next cycle. Verification Device appears in Attack Surface with current firmware v…

…kspace and is scoped to the tenant. Collectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an appen…

…itigations Compensating controls already in place (WAF, segmentation, MFA, EDR) Reduces effective risk even before the underlying flaw is patched Age How long the finding has been…

…job failure: the change was applied, but AssurIQ has not yet observed evidence that it worked. Decision tree Pending reboot: check whether the target requires a restart to comp…

…d, work-profile and dedicated Android — and why unsupported items are evidence gaps, not failures. Documentation status This article is a concise reference. A fully expanded guid…

Overview On-prem AD hygiene checks and what evidence they produce. Documentation status This article is a concise reference. A fully expanded guide for…

Overview Fulfilling evidence requests with packages and secure links. Documentation status This article is a concise reference.…