Search documentation

…henticate to devices during discovery and assessment. Treat both with least privilege. Credentialed checks (WinRM/SSH) described in this article are not active in the current v0…

Overview Scoped API keys, rotation and least privilege. Documentation status This article is a concise reference. A fully expanded guide for “Authe…

…gration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, conditional access posture, legacy authentication detection and di…

…tor-side query so AssurIQ can assess password policy, stale accounts, privileged group membership and legacy protocol exposure alongside cloud identity evidence. Requirements A…

…er SSH (not Telnet) enabled for configuration backup A read-only, non-privileged (or privilege-level 1 with limited show commands) account for SSH Permissions SNMPv3 user with…

…the pfSense management interface Permissions API user assigned a privilege set restricted to read-only diagnostic and status pages SNMP community/v3 credential for interface a…

Overview Privileged accounts, MFA coverage, legacy auth and stale identities. Documentation status This article is a…

…ccess authorization and management AIQ-AC-001, AIQ-AC-002, AIQ-ID-001 Privileged access and MFA AIQ-ID-004, AIQ-ID-006 Audit controls / monitoring AIQ-MO-001, AIQ-MO-002 Endpoint a…

…escribes a practice, not a regulation: for example, AIQ-ID-004 covers privileged account MFA enforcement. Frameworks then reference that same control wherever their own language re…

…re supported Permissions Administrator with the Auditor/Read-Only privilege level API key or credential scoped to that account for HTTPS management API polling Setup Enable…

…ave the qualified individual report to the board or governing body at least annually. AssurIQ control mapping Program element Representative AssurIQ controls Qualified individu…