Search documentation

Purpose On-prem Active Directory integration reads domain user, group and Group Policy state through a lightweight collector-s…

…atus This article is a concise reference. A fully expanded guide for “Active Directory Assessment” is scheduled in the documentation roadmap; the steps below are accurate for the c…

…rage, conditional access posture, legacy authentication detection and directory audit history. Controls AIQ-ID-001, AIQ-ID-004, AIQ-ID-006 and AIQ-ID-007, along with AIQ-AC-001/0…

…very module needs to be enabled at every site. Most modules are not active in v0.1 The shipping v0.1 collector implements Core Heartbeat and conservative TCP-connect Port/Service…

…googleapis.com from the AssurIQ Cloud Connector Permissions admin.directory.user.readonly — read user accounts and status admin.directory.group.readonly — read group membership…

…al buttons. Capability Today Requires new agent build? Asset Sensor Active — TCP-connect discovery + topology (LLDP/CDP, FDB, routes) No Configuration Sensor Contract only (encry…

…thin the approved scope Windows x64 and Linux x64 native builds Not active yet SNMP discovery and polling LLDP/CDP neighbor-protocol topology building ARP or ICMP sweep-based d…

…Credentialed checks (WinRM/SSH) described in this article are not active in the current v0.1 collector, which performs uncredentialed TCP-connect discovery only. This article d…

…and vulnerability probing described elsewhere in this section are not active yet. See What the v0.1 collector does today. Elements of a scope Element Purpose CIDR ranges The…

…exploitation in the next 30 days Distinguishes theoretical risk from active threat KEV Whether CISA has confirmed real-world exploitation The strongest available signal that explo…

…plicitly. Because the collector runs as a system service (not an interactive user session), it does not automatically inherit a logged-in user's browser proxy settings. Windows…

…lector's health state changes to Revoked and it stops appearing as an active source for new jobs. Uninstall the host software Remove the collector package for the host's form f…

…r source. Linux (systemd) systemctl status assuriq-collector If inactive or failed, run `journalctl -u assuriq-collector -n 100` for the crash reason, then `systemctl restart a…

…. This is what makes the platform usable in an audit: nobody can retroactively edit history to make a point-in-time report look better than it was. Example: control AIQ-ID-004 (p…

…n the AssurIQ remediation item Company-to-customer mapping covers all active managed customers Data collected Ticket identifiers, status, priority and assignment Company/client…

…p extracts the collector binary and configuration to the program data directory, registers the AssurIQCollector Windows service, and starts it. On first start, the service exchange…

…Check status systemctl status assuriq-collector Expected state is active (running). Use journalctl for recent logs, and confirm the collector shows Healthy in the site's Collec…

…"disk_free_pct": 71.0, "uptime_s": 86400, "queue_depth": 0, "active_job_id": null, "last_error": null } 200 response { "ok": true, "collector_id": "col_...", "cu…