Search documentation

…v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted, identical mirrors are also exposed…

…atus This article is a concise reference. A fully expanded guide for “API Overview” is scheduled in the documentation roadmap; the steps below are accurate for the current product…

Overview Scoped API keys, rotation and least privilege. Documentation status This article is a concise reference. A fully ex…

Overview Storing SNMP, SSH, WinRM and API credentials safely. Documentation status This article is a concise reference. A fully expanded guide for…

…routes Layer-3 reachability, not physical wiring No — inferred Vendor API Vendor-reported topology, trusted but not physically observed by AssurIQ No — inferred AI inference Correl…

…ation enabled for the AssurIQ service account Outbound HTTPS to googleapis.com from the AssurIQ Cloud Connector Permissions admin.directory.user.readonly — read user accounts a…

…s Controller account with the Viewer (read-only) administrator role API access enabled on the controller for local API keys where supported Setup Create a read-only admin In…

Purpose The Meraki connector uses the Meraki Dashboard API to collect organization, network, device, client and security appliance event data across MX, MS and MR pr…

Purpose The FortiGate connector combines a read-only REST API administrator profile with SNMPv3 polling to collect firewall policy, VPN, firmware and interface exposure…

…ncy for gateway devices. Requirements SonicOS 7.x with management API access enabled A read-only administrator account SNMP enabled for interface and system metrics, or API-onl…

Purpose This integration uses the PAN-OS XML/REST API with a read-only administrator role to collect firewall policy, threat prevention, App-ID and firmware evi…

…s client and configuration evidence using SNMPv3 or the Aruba Central API. Requirements For on-prem: SNMPv3 enabled on AOS-CX/AOS-Switch devices and SSH for config backup For c…

…age state from pfSense/pfSense Plus appliances using the pfSense REST API package or SNMP, supporting exposure and configuration-drift evidence for small and mid-size sites. Requ…

…ity, EDR alert and onboarding status via the Microsoft Graph Security API, feeding endpoint vulnerability and detection controls alongside the Microsoft 365 identity connector. R…

Purpose The CrowdStrike Falcon connector uses the Falcon OAuth2 API with read-only scopes to collect host sensor health, detection and vulnerability exposure data for endpoin…

…application inventory data through the SentinelOne Management Console API using a read-only service user, feeding endpoint detection and vulnerability controls. Requirements A…

…. Requirements An RMM tenant (NinjaOne, Datto RMM or N-able) with API access enabled for your account tier A dedicated API application/client with read-only or reporting scope…

…quirements A PSA tenant (ConnectWise PSA, Autotask or HaloPSA) with API access enabled A dedicated API member/client with ticket read/write and company read scopes A mapping betw…

Overview Stable identifiers and relationship conventions. Documentation status This article is a concise reference. A fully expanded guide for “Objects and…

Overview Read and reconcile the inventory hierarchy. Documentation status This article is a concise reference. A fully expanded guide for “Customers, Sites…

Overview Query findings with risk factors and status transitions. Documentation status This article is a concise reference. A fully expanded guide for “Find…

Overview Read control results and post manual evidence. Documentation status This article is a concise reference. A fully expanded guide for “Controls and E…

Overview Create, approve and monitor jobs programmatically. Documentation status This article is a concise reference. A fully expanded guide for “Remediatio…

Overview Generate snapshots and create secure links. Documentation status This article is a concise reference. A fully expanded guide for “Reports” is sched…

Overview PSA ticket sync, KEV auto-jobs and monthly executive delivery. Documentation status This article is a concise reference. A fully expanded guide for…

…diately discards the token. Under the hood, first start calls POST /api/v1/collectors/enroll with the token, hostname, OS and version; a successful response returns the collector…

…enable --now assuriq-collector Under the hood, `enroll` calls POST /api/v1/collectors/enroll with the token, hostname, OS and version; a successful response returns the collector…

…n. Dashed edges are inferred — from forwarding tables, routes, vendor APIs or AI inference — and are labelled with their source protocol. Provenance on every edge Hovering or c…

…and privacy passphrases, then confirm the management IP or Dashboard API polling location is allow-listed for the collector's egress. Aruba (ArubaOS-CX) snmp-server vrf default…

…tbeat and observation reporting to the AssurIQ control plane over the API v1 endpoints Explicit CIDR-based scan scopes with exclusions and blocked targets Conservative TCP-connect…