Search documentation

…atus This article is a concise reference. A fully expanded guide for “Vulnerability Scanning” is scheduled in the documentation roadmap; the steps below are accurate for the curren…

Overview Run the first vulnerability, exposure and identity assessment and read the results correctly. Documentation status This ar…

Overview CVSS scores describe how severe a vulnerability could theoretically be if exploited under worst-case conditions. It says nothing about whether t…

…urpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feeding endpoint vulnerab…

…PI with read-only scopes to collect host sensor health, detection and vulnerability exposure data for endpoints protected by Falcon. Requirements A CrowdStrike Falcon tenant wi…

Overview AIQ-SCN-001 — schedule, scope, collector and suppression checks. Documentation status This article is a concise reference. A fully expanded guide f…

Overview Query findings with risk factors and status transitions. Documentation status This article is a concise reference. A fully expanded guide for “Find…

…erts already managed by your RMM platform against AssurIQ's asset and vulnerability model, avoiding duplicate agents and giving credit for patches applied outside AssurIQ. Requir…

…le API using a read-only service user, feeding endpoint detection and vulnerability controls. Requirements A SentinelOne Management Console with API access enabled A service us…

…xclusions. SNMP, LLDP/CDP, ARP/ICMP sweeps, credentialed scanning and vulnerability probing described elsewhere in this section are not active yet. See What the v0.1 collector does…

…NMP Discovery, LLDP/CDP Enrichment, ARP/ICMP-based Network Discovery, Vulnerability Probe, Configuration Collection, Active Directory Assessment and Local Evidence Collection are d…

…rds as a result. When AssurIQ detected an internet-facing, KEV-listed vulnerability on the dealership's edge firewall (sr-ford-fw01), the finding was automatically linked to the te…

…modelled as seven capabilities — Asset Sensor, Configuration Sensor, Vulnerability Sensor, Security Sensor, Threat Sensor, Response Engine and Evidence Engine — each negotiated by…

…scovery, SNMP polling, configuration backup, log collection and local vulnerability checks for a site. It never accepts inbound connections: every exchange with AssurIQ is a collec…

…e replaced. Source not re-synced: confirm the underlying data source (vulnerability scanner, patch management connector, configuration collector) has completed a fresh cycle since…

…nity as a fallback) — never a write community string Host Inventory / Vulnerability Probe A local account with read access to installed software, patch level and configuration; not…

…RP or ICMP sweep-based discovery Credentialed scanning (WinRM or SSH) Vulnerability probes Banner grabbing Docker/container image (roadmap) ARM64 packages and a hardened VM/applian…