kate-gibson
Palo Alto Networks Cortex XSIAM
Last Updated: May 29, 2026What is Palo Alto Cortex XSIAM? Palo Alto Networks Cortex XSIAM is a next-generation SOC platform that unifies XDR, SIEM, automation, threat intelligence, and attack surface management. Why Should You Use the Palo Alto Cortex XSIAM Connector? The Palo Alto Cortex XSIAM connector provides visibility into the assets in your environment. You can use this...
CyberArk Privileged Access Manager (PAM)
Last Updated: April 27, 2026What is CyberArk PAM? CyberArk’s Privileged Access Manager is a full life-cycle solution for managing the most privileged accounts and SSH Keys in the enterprise. It enables organizations to secure, provision, manage, control and monitor all activities associated with all types of privileged identities. Why Should You Use the CyberArk PAM Connector? The CyberArk PAM...
Microsoft Defender for Cloud Apps
Last Updated: April 20, 2026What is Microsoft Defender for Cloud Apps? Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security) is a cross-SaaS solution bringing deep visibility, strong data controls, and enhanced threat protection to your cloud apps. Microsoft Defender for Cloud Apps includes cloud access security broker (CASB) functionality, SaaS Security Posture Management (SSPM), advanced threat protection,...
Silverfort
Last Updated: March 10, 2026What is Silverfort? Silverfort enforces secure authentication and access policies across corporate networks, industrial networks and cloud environments, including sensitive IT and OT systems that were considered ‘unprotectable’ until today, enabled by an innovative agentless and proxyless architecture. Why Should You Use the Silverfort Connector? The Silverfort connector provides visibility into the assets in your...
HashiCorp Terraform
Last Updated: March 10, 2026What is HashiCorp Terraform? Why Should You Use the HashiCorp Terraform Connector? The HashiCorp Terraform connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between assets, users, applications, and data How Does This Connector Work? Lucidum executes read-only requests...
Quick Start: Understanding Data in Your Lucidum System
Last Updated: February 9, 2026The following sections provide the steps to quickly find and examine the data in your Lucidum system. Determining Which Data Sources (Connectors) Exist in Your Enviroment There are two ways to determine which Connectors are ingesting data: Data Sources page Query Tool Data Sources The Data Sources page displays all the data sources (Connectors) that...
Absolute
Last Updated: January 26, 2026What is Absolute? The Absolute platform is a cloud-based Endpoint Visibility and Control solution that allows you to see all your devices and applications, secure your data, and prove compliance. Why Should You Use the Absolute Connector? The Absolute connector provides visibility into the assets in your environment. You can use this visibility to: ensure...
SailPoint Actions
Last Updated: January 26, 2026Actions for SailPoint Send Data to SailPoint. Sends a custom set of Lucidum data to SailPoint. Disable Account. Disable all accounts that meet the criteria in the filters. Run Recertification. Sends a recertification request to SailPoint for all accounts that meet the criteria in the filters. Use Cases Below are the possible use cases for...
Exporting and Importing SmartLabels
Last Updated: December 19, 2025You can use export SmartLabels and import SmartLabels.This allows you to easily share content between Lucidum systems and use consistent content across all Lucidum systems. Because SmartLabels often include complex queries and expressions, exporting and importing allows you to do the work once but use the work everywhere. Exporting a SmartLabel When you export a...
Exporting and Importing MetaBlocks
Last Updated: April 28, 2026You can use MetaBlocks to bundle Connectors, Dashboards, Actions, SmartLabels, and Saved Queries for export and import. This allows you to easily share content between Lucidum systems and use consistent content across all Lucidum systems. Exporting a MetaBlock When you export a MetaBlock, Lucidum sends a .json file to the downloads directory on the local...
Acquia Security
Last Updated: January 7, 2026What is Acquia Security? Acquia Cloud Platform is a Drupal-tuned, application lifecycle management suite with a complete infrastructure to support Drupal deployment workflow processes from development and staging through to production. Why Should You Use the Acquia Security Connector? The Acquia Security connector provides visibility into the assets in your environment. You can use this...
Example MetaBlocks
Last Updated: December 2, 2025This chapter provides a simple example MetaBlock. Adding a Dashboard and Its SmartLabels to a MetaBlock In this example, we add a dashboard and the SmartLabel used in the dashboard to a MetaBlock. We know that we want to export a custom dashboard for a colleague to use on their Lucidum system. We package both...
Using MetaBlocks with SmartLabels
Last Updated: January 8, 2026What are MetaBlocks? Lucidum includes a feature called MetaBlocks. MetaBlocks allow you to group Dashboards, Connectors, Actions , SmartLabels, and Saved Queries, similar to how you would use a folder. You can store related items in a single MetaBlock. For more details, see Creating and Managing MetaBlocks. Adding SmartLabels to MetaBlocks After creating a SmartLabel,...
Using MetaBlocks with Saved Queries
Last Updated: November 22, 2025What are MetaBlocks? Lucidum includes a feature called MetaBlocks. MetaBlocks allow you to group Dashboards, Connectors, Actions , SmartLabels, and Saved Queries, similar to how you would use a folder. You can store related items in a single MetaBlock. Dashboards, Connectors, Actions , SmartLabels, and Saved Queries For more details, see Creating and Managing MetaBlocks....
Using MetaBlocks with Dashboards
Last Updated: November 24, 2025What are MetaBlocks? Lucidum includes a feature called MetaBlocks. MetaBlocks allow you to group Dashboards, Connectors, Actions , SmartLabels, and Saved Queries, similar to how you would use a folder. You can store related items in a single MetaBlock. For more details, see Creating and Managing MetaBlocks. Adding Dashboards to MetaBlocks To add an Dashboard...
API Token Management
Last Updated: April 22, 2026The API Token Management page allows you to view, create, edit, and manage API tokens. For user accounts of type Admin, the API Token Management page displays: Action tokens. Tokens for API calls to the Lucidum Data Group. User Generated tokens. Tokens for all other Lucidum API endpoints. Limited tokens. Created by Admin accounts. Tokens...
Endpoints for SmartLabels
Last Updated: June 3, 2026You can use the Lucidum API to: Search the list of SmartLabels by SmartLabel name and retrieve the SmartLabel ID, LLM Description, and LLM Business Value Retrieve details about a SmartLabel The following sections describe the endpoints for these actions. Headers Requests to the endpoints in the Lucidum API v2 must also include a header with: Content-Type...
System Preferences
Last Updated: November 6, 2025In addition to Themes, Lucidum allows organizations to to customize the UI with system preferences. System Preferences define default preferences for all users. You can set System Preferences in the new System Preferences page (Settings > System Preferences): System Preferences Navigate to Settings > System Preferences. The System Preferences page appears. In the System Preferences...
Introduction to Lucidum MoM
Last Updated: November 6, 2025What is MoM? Lucidum MoM (Manager of Managers) allows you to manage multiple Lucidum systems from a single browser session. From MoM, you can: view the status, user count, and asset count for each of your Lucidum instances. jump directly to a Lucidum instance to perform troubleshooting or maintenance tasks. add and manage users forone...
Adding Users to MoM
Last Updated: February 9, 2026Lucidum MoM (Manager of Managers) allows you to manage users from a single browser session. You can add users in MoM and align them with Lucidum Instances. Viewing the List of Users To view the list of users in MoM: Log in to MOM. Select the Users icon in the left navbar. The Users page...
Freshdesk
Last Updated: October 23, 2025What is Freshdesk? Freshdesk is the cloud-based, agentic AI, customer engagement solution from Freshworks. Freshdesk lets you streamline your company’s customer support and helps you to efficiently manage your customers as you scale. Why Should You Use the Freshdesk Connector? The Freshdesk connector provides visibility into the assets and users managed by the service desk...
CyberArk Identity Security Platform Shared Services (ISPSS)
Last Updated: October 23, 2025What is CyberArk Identity Security Platform Shared Services (ISPSS)? CyberArk Identity Security Platform Shared Services (ISPSS) helps organizations solve identity and access management (IAM) security challenges with minimal setup and fast time to value. Focused on privilege, ISPSS helps secure access for any user across any type of application or system, from anywhere, using any...
Creating and Managing MetaBlocks
Last Updated: December 17, 2025This chapter describes how to view, create, edit, and delete a MetaBlock. Viewing MetaBlocks The MetaBlocks page (Left menu > MetaBlocks icon) displays information about existing MetaBlocks. Name. Name of the MetaBlock. Description. Description of the MetaBlock Dependencies. These icons represent objects in Luciudm (Dashboards, Connectors, Actions, SmartLabels, Saved Queries) and displays the number of...
Introduction
Last Updated: April 3, 2026What are MetaBlocks? Lucidum includes a feature called MetaBlocks. MetaBlocks allow you to group Dashboards, Connectors, Actions, SmartLabels, and Saved Queries, similar to how you would use a folder. You can store related items in a single MetaBlock. You can export and import MetaBlocks. For example: You could store a Dashboard, the Saved Queries, use...
SFTPGo
Last Updated: September 12, 2025What is SFTPGo? SFTPGo is a managed, event-driven file transfer solution. SFTPGo abstracts storage backends(local filesystems, cloud, and SFTP servers) and provides access to files through its built-in WebClient (supports SFTP, SCP, FTP/S, WebDAV, HTTP/S, REST API). Why Should You Use the SFTPGo Connector? The SFTPGo connector provides visibility into the files and assets in...
OpenTelemetry Action
Last Updated: September 24, 2025Actions for OpenTelemetry Send Data. Send Lucidum data to OpenTelemetry. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to OpenTelemetry on a regular schedule. You can send specific sets of normalized, enriched Lucidum data to OpenTelemetry to be indexed, searched,...
Check Point Infinity External Risk Management
Last Updated: October 23, 2025What is Check Point Infinity External Risk Management (formerly Cyberint)? Check Point Infinity External Risk Management (formerly Cyberint) provides Intelligence-Driven Digital Risk Protection that monitors, investigates, and analyzes data from the web, social media, and cyber sources to identify threats and make better security decisions. Why Should You Use the Infinity External Risk Management Connector?...
Slack Actions Video
Last Updated: September 29, 2025https://lucidum.cloud/docs/using_slack_actions_edited.mp4
Forescout Actions
Last Updated: September 22, 2025Actions for Forescout Send Data to Forescout. Sends a custom set of Lucidum data to Forescout. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Forescout on a regular schedule. You can send normalized, enriched Lucidum data to Forescout to...
Using Queries with Nested Lists
Last Updated: January 30, 2026What is a Nested List? Lucidum includes fields of type “nested list”. These fields behave differently than list fields. Nested Lists are sometimes called arrays and organize data in a table structure. For example, Applications is a field of type “nested list”. In the Query tool, the field looks like this: Note that Applications is...
Saved Queries and Historical Queries
Last Updated: December 18, 2025The Query tool includes fields for re-using queries: Load from Query Library. Leads to a list of saved queries. Saved queries are associated with your login. You can view saved queries you create, those shared with you by other users, and those created by Lucidum (Value-Oriented Queries or VOQs). Load from Historical Query. Leads to...
Creating Queries
Last Updated: September 17, 2025The following sections describe how to use the Query Tool. You can then create queries to use in Dashboards, Actions, and SmartLabels. Because queries allow you to find data in the Lucidum database, you might find it helpful to learn about and view the available date in Lucidum. For details about viewing the available data...
Queries and Data
Last Updated: February 9, 2026Why Learn About Queries? Multiple features in Lucidum use queries: Charts in Dashboards. Clicking the Configure Filters button leads to the Query Tool. Actions. Clicking the Configure Filters button leads to the Query Tool. SmartLabels. Clicking the Add Rule or Edit Rule button leads to the Query Tool. Dashboards. Clicking the Refine Scope icon leads...
Endpoints for Data Ingestion
Last Updated: November 12, 2025You can use the Lucidum API to: Trigger data ingestion from all configured connectors Retrieve information about data ingestion jobs The following sections describe the endpoints for these actions. Headers Requests to the endpoints in the Lucidum API v2 must also include a header with: Content-Type of JSON. bearer Token we generated in the Edit User page. Retrieve Information...
Adding Lucidum Systems (Deployments) to MoM
Last Updated: November 6, 2025Lucidum MoM (Manager of Managers) allows you to manage multiple Lucidum systems from a single browser session. Adding Lucidum Systems to Lucidum MoM Before you can monitor your Lucidum systems with MoM, you must first add the systems to MoM. To do this: Log in to the first Lucidum system you want to monitor with...
Using the Luci Chatbot
Last Updated: April 21, 2026Introduction The Luci Chatbot allows you to ask questions about the Lucidum platform and about cybersecurity. Luci will provide written answers to your questions. Using Luci To use Luci: Click the Luci icon in the upper right. The Ask Luci modal page appears: You can ask Luci general questions about Lucidum: You can ask Luci...
Renewing a Proxy Server
Last Updated: June 11, 2026When to Renew the Tunnel Proxy There are two circumstances that require you to renew your existing tunnel proxy: Lucidum releases a new version of the proxy image. Periodically, Lucidum updates the proxy image. The latest image includes the latest OS updates and latest package updates and is therefore most secure. The current tunnel proxy...
Barracuda CloudGen Firewall
Last Updated: April 24, 2025What is Barracuda CloudGen Firewall? Barracuda CloudGen Firewall is a family of hardware, virtual, and cloud-based appliances that protect and enhance your dispersed network infrastructure. They deliver advanced security by tightly integrating a comprehensive set of Cloud-Generation firewall technologies, including Layer 7 application profiling, intrusion prevention, web filtering, malware and advanced threat protection, antispam protection,...
Jamf Security Cloud
Last Updated: April 30, 2025What is Jamf Security Cloud (formerly Jamf Radar)? The Jamf Security Cloud is a web application for configuring and managing applications, settings, and integrations for Jamf Protect (provides web threat prevention) and Jamf Connect (provides ZTNA capabilities). Jamf Security Cloud provides management tools, centralized dashboards, reports, and policies for Jamf Protect and Jamf Connect and...
AWS Connector Videos
Last Updated: September 29, 2025Configuring a Single AWS Connector Profile for Multiple AWS Accounts: https://lucidum.cloud/docs/configuring_aws_connector_for_multi_acounts_compressed-1.mp4 Configuring a Single AWS Connector Profile for a Single AWS Account: https://lucidum.cloud/docs/configuring_aws_connector_for_single_account_compressed4.mp4
Endpoints for Assets and Users with LDG Data Only
Last Updated: June 25, 2025Lucidum provides APIs to retrieve data directly from the Lucidum Data Group. The endpoint for /CMDB/v2/data/cmdb queries all fields, both raw and enriched (Lucidum Data Group). The endpoint for /CMDB/v2/data/ldg retrieves only enriched data from the Lucidum Data Group. This chapter describes the endpoint /CMDB/v2/data/ldg. This endpoint provides a more focused set of results for...
User Preferences
Last Updated: June 19, 2026In addition to Themes, Meridian allows users to customize the UI with user preferences. User Preferences Click on the hamburger icon (three vertical dots) in the upper right corner of Meridian, next to your login name. The User Preferences modal page appears: You can one or more user preferences: Preferred Name. The name that appears...
ThreatConnect
Last Updated: April 3, 2025What is ThreatConnect? ThreatConnect enables threat intelligence operations, security operations, and cyber risk management teams to work together for more effective, efficient, and collaborative cyber defense and protection. With ThreatConnect, organizations infuse ML- and AI-powered threat intel and cyber risk quantification into their work. Why Should You Use the ThreatConnect Connector? The ThreatConnect connector provides...
OX Security
Last Updated: April 3, 2025What is OX Security? The OX Security Active ASPM platform unifies application security across the SDLC, enhancing the organization’s security posture. OX delivers a tightly integrated set of capabilities that empower development and AppSec teams to deliver more secure applications at the scale and speed of today’s business environment. Why Should You Use the OX...
Databricks
Last Updated: April 3, 2025What is Databricks? Databricks is a unified, open analytics platform for building, deploying, sharing, and maintaining enterprise-grade data, analytics, and AI solutions at scale. The Databricks Data Intelligence Platform integrates with cloud storage and security in your cloud account, and manages and deploys cloud infrastructure on your behalf. Why Should You Use the Databricks Connector?...
Theme Management
Last Updated: March 16, 2026The Theme Management page (Settings > Theme Management) allows you to customize aspects of the Lucidum user interface. NOTE: For additional ways to customize the Lucidum user interface, see User Preferences. Viewing the List of Themes To view the list of existing themes: Go to Settings >Theme Management. The Theme Management page appears. The Theme...
Data Scheduler
Last Updated: January 28, 2026The Data Scheduler page (Settings > Data Scheduler) displays information about all Connector (ingestion or Ingress) jobs and all Actions (Egress) jobs. The Data Scheduler page also allows you to manually trigger ingestion jobs. Manually Trigger Ingestion Jobs To manually trigger the next ingestion job: Go to Settings > Data Scheduler. Select the Ingress tab....
RapidFort
Last Updated: March 27, 2025What is RapidFort? RapidFort secures your containers from development to production with Near Zero CVE Images, SCA Scanning, DevTime protection, and RunTime protection. Why Should You Use the RapidFort Connector? The RapidFort connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies...
ngrok
Last Updated: March 27, 2025What is ngrok? ngrok is a globally distributed reverse proxy that secures, protects and accelerates your applications and network services, no matter where you run them. ngrok supports delivering HTTP, TLS or TCP-based applications. Why Should You Use the ngrok Connector? The ngrok connector provides visibility into the assets and users in your environment. You...
Pager Duty Actions
Last Updated: September 24, 2025Actions for Pager Duty Send Data to Pager Duty. Sends a custom set of Lucidum data to Pager Duty. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Pager Duty on a regular schedule. You can send normalized, enriched Lucidum...
ZeroFox Actions
Last Updated: September 25, 2025Actions for ZeroFox Send Data to ZeroFox. Sends a custom set of Lucidum data to ZeroFox. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ZeroFox on a regular schedule. You can send normalized, enriched Lucidum data to ZeroFox to...
Wiz Actions
Last Updated: September 25, 2025Actions for Wiz Send Data to Wiz. Sends a custom set of Lucidum data to Wiz. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Wiz on a regular schedule. You can send normalized, enriched Lucidum data to Wiz to...
Webroot Business Endpoint Protection Actions
Last Updated: September 25, 2025Actions for Webroot Business Endpoint Protection Send Data to Webroot Business Endpoint Protection. Sends a custom set of Lucidum data to Webroot Business Endpoint Protection. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Webroot Business Endpoint Protection on a...
Trustwave MailMarshal Actions
Last Updated: September 25, 2025Actions for Trustwave MailMarshal Send Data to Trustwave MailMarshal. Sends a custom set of Lucidum data to Trustwave MailMarshal. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Trustwave MailMarshal on a regular schedule. You can send normalized, enriched Lucidum...
Trend Micro Vision One Actions
Last Updated: September 25, 2025Actions for Trend Micro Vision One Send Data to Trend Micro Vision One. Sends a custom set of Lucidum data to Trend Micro Vision One. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Trend Micro Vision One on a...
Trend Micro Cloud App Security Actions
Last Updated: September 25, 2025Actions for Trend Micro Cloud App Security Send Data to Trend Micro Cloud App Security. Sends a custom set of Lucidum data to Trend Micro Cloud App Security. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Trend Micro Cloud...
Trellix Actions
Last Updated: February 10, 2026Actions for Trellix Send Data to Trellix. Sends a custom set of Lucidum data to Trellix. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Trellix on a regular schedule. You can send normalized, enriched Lucidum data to Trellix to...
TOPdesk Enterprise Service Management (ESM) Actions
Last Updated: September 25, 2025Actions for TOPdesk ESM Send Data to TOPdesk ESM. Sends a custom set of Lucidum data to TOPdesk ESM. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to TOPdesk ESM on a regular schedule. You can send normalized, enriched Lucidum...
Delinea Secret Server Actions
Last Updated: September 22, 2025Actions for Delinea Secret Server Send Data to Delinea Secret Server. Sends a custom set of Lucidum data to Delinea Secret Server. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Delinea Secret Server on a regular schedule. You can...
ThreatQuotient Actions
Last Updated: September 25, 2025Actions for ThreatQ Send Data to ThreatQ. Sends a custom set of Lucidum data to ThreatQ. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ThreatQ on a regular schedule. You can send normalized, enriched Lucidum data to ThreatQ to...
ThreatConnect Actions
Last Updated: September 25, 2025Actions for ThreatConnect Send Data to ThreatConnect. Sends a custom set of Lucidum data to ThreatConnect. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ThreatConnect on a regular schedule. You can send normalized, enriched Lucidum data to ThreatConnect to...
F5 Distributed Cloud App Infrastructure Protection (AIP) (formerly F5 Threat Stack) Actions
Last Updated: September 22, 2025Actions for F5 Distributed Cloud AIP Send Data to F5 Distributed Cloud AIP. Sends a custom set of Lucidum data to F5 Distributed Cloud AIP. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to F5 Distributed Cloud AIP on a...
Telos Actions
Last Updated: February 10, 2026Actions for Telos Send Data to Telos. Sends a custom set of Lucidum data to Telos. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Telos on a regular schedule. You can send normalized, enriched Lucidum data to Telos to...
Tanium Discover Actions
Last Updated: September 25, 2025Actions for Tanium Discover Send Data to Tanium Discover. Sends a custom set of Lucidum data to Tanium Discover. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Tanium Discover on a regular schedule. You can send normalized, enriched Lucidum...
SysAid Actions
Last Updated: September 24, 2025Actions for SysAid Send Data to SysAid. Sends a custom set of Lucidum data to SysAid. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to SysAid on a regular schedule. You can send normalized, enriched Lucidum data to SysAid to...
Sophos Central Actions
Last Updated: September 24, 2025Actions for Sophos Central Send Data to Sophos Central. Sends a custom set of Lucidum data to Sophos Central. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Sophos Central on a regular schedule. You can send normalized, enriched Lucidum...
SentinelOne Singularity XDR Actions
Last Updated: September 24, 2025Actions for SentinelOne Singularity XDR Send Data to SentinelOne Singularity XDR. Sends a custom set of Lucidum data to SentinelOne Singularity XDR. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to SentinelOne Singularity XDR on a regular schedule. You can...
SolarWinds Actions
Last Updated: September 24, 2025Actions for SolarWinds Send Data to SolarWinds. Sends a custom set of Lucidum data to SolarWinds. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to SolarWinds on a regular schedule. You can send normalized, enriched Lucidum data to SolarWinds to...
Google Security Operations SOAR Actions
Last Updated: October 23, 2025Actions for Google Security Operations SOAR Send Data to Google Security Operations SOAR. Sends a custom set of Lucidum data to Google Security Operations SOAR. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Google Security Operations SOAR on a...
Secureworks Taegis XDR Actions
Last Updated: September 24, 2025Actions for Secureworks Taegis XDR Send Data to Secureworks Taegis XDR. Sends a custom set of Lucidum data to Secureworks Taegis XDR. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Secureworks Taegis XDR on a regular schedule. You can...
ScienceLogic Actions
Last Updated: September 24, 2025Actions for ScienceLogic Send Data to ScienceLogic. Sends a custom set of Lucidum data to ScienceLogic. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ScienceLogic on a regular schedule. You can send normalized, enriched Lucidum data to ScienceLogic to...
Salesforce Actions
Last Updated: September 24, 2025Actions for Salesforce Send Data to Salesforce. Sends a custom set of Lucidum data to Salesforce. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Salesforce on a regular schedule. You can send normalized, enriched Lucidum data to Salesforce to...
RiskIQ Illuminate Actions
Last Updated: September 24, 2025Actions for RiskIQ Illuminate Send Data to RiskIQ Illuminate. Sends a custom set of Lucidum data to RiskIQ Illuminate. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to RiskIQ Illuminate on a regular schedule. You can send normalized, enriched Lucidum...
Recorded Future Actions
Last Updated: September 24, 2025Actions for Recorded Future Send Data to Recorded Future. Sends a custom set of Lucidum data to Recorded Future. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Recorded Future on a regular schedule. You can send normalized, enriched Lucidum...
Rackspace Cloud Actions
Last Updated: September 24, 2025Actions for Rackspace Cloud Send Data to Rackspace Cloud. Sends a custom set of Lucidum data to Rackspace Cloud. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Rackspace Cloud on a regular schedule. You can send normalized, enriched Lucidum...
Qualys Global AssetView Actions
Last Updated: September 24, 2025Actions for Qualys Global AssetView Send Data to Qualys Global AssetView. Sends a custom set of Lucidum data to Qualys Global AssetView. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Qualys Global AssetView on a regular schedule. You can...
Qualys Cloud Platform Actions
Last Updated: September 24, 2025Actions for Qualys Cloud Platform Send Data to Qualys Cloud Platform. Sends a custom set of Lucidum data to Qualys Cloud Platform. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Qualys Cloud Platform on a regular schedule. You can...
Proofpoint SIEM Actions
Last Updated: September 24, 2025Actions for Proofpoint SIEM Send Data to Proofpoint SIEM. Sends a custom set of Lucidum data to Proofpoint SIEM. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Proofpoint SIEM on a regular schedule. You can send normalized, enriched Lucidum...
Palo Alto Networks Panorama Actions
Last Updated: September 24, 2025Actions for Palo Alto Networks Panorama Send Data to Palo Alto Networks Panorama. Sends a custom set of Lucidum data to Palo Alto Networks Panorama. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Palo Alto Networks Panorama on a...
Palo Alto Networks Cortex XDR Actions
Last Updated: September 24, 2025Actions for Palo Alto Networks Cortex XDR Send Data to Palo Alto Networks Cortex XDR. Sends a custom set of Lucidum data to Palo Alto Networks Cortex XDR. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Palo Alto Networks...
Orca Cloud Visibility Platform Actions
Last Updated: September 24, 2025Actions for Orca Cloud Visibility Platform Send Data to Orca Cloud Visibility Platform. Sends a custom set of Lucidum data to Orca Cloud Visibility Platform. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Orca Cloud Visibility Platform on a...
Optiv Actions
Last Updated: September 24, 2025Actions for Optiv Send Data to Optiv. Sends a custom set of Lucidum data to Optiv. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Optiv on a regular schedule. You can send normalized, enriched Lucidum data to Optiv to...
One Identity Actions
Last Updated: September 24, 2025Actions for One Identity Send Data to One Identity. Sends a custom set of Lucidum data to One Identity. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to One Identity on a regular schedule. You can send normalized, enriched Lucidum...
Okta Actions
Last Updated: September 24, 2025Actions for Okta Send Data to Okta. Sends a custom set of Lucidum data to Okta. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Okta on a regular schedule. You can send normalized, enriched Lucidum data to Okta to...
New Relic Actions
Last Updated: September 23, 2025Actions for New Relic Send Data to New Relic. Sends a custom set of Lucidum data to New Relic. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to New Relic on a regular schedule. You can send normalized, enriched Lucidum...
Moogsoft Actions
Last Updated: September 23, 2025Actions for Moogsoft Send Data to Moogsoft. Sends a custom set of Lucidum data to Moogsoft. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Moogsoft on a regular schedule. You can send normalized, enriched Lucidum data to Moogsoft to...
Microsoft System Center Service Manager Actions
Last Updated: September 23, 2025Actions for Microsoft System Center Service Manager Send Data to Microsoft System Center Service Manager. Sends a custom set of Lucidum data to Microsoft System Center Service Manager. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Microsoft System Center...
Microsoft Azure Monitor Actions
Last Updated: September 23, 2025Actions for Microsoft Azure Monitor Send Data to Microsoft Azure Monitor. Sends a custom set of Lucidum data to Microsoft Azure Monitor. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Microsoft Azure Monitor on a regular schedule. You can...
Trellix ePolicy Orchestrator Actions
Last Updated: September 25, 2025Actions for Trellix ePolicy Orchestrator Send Data to Trellix ePolicy Orchestrator. Sends a custom set of Lucidum data to Trellix ePolicy Orchestrator. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Trellix ePolicy Orchestrator on a regular schedule. You can...
ManageEngine ServiceDesk Plus Actions
Last Updated: September 23, 2025Actions for ManageEngine ServiceDesk Plus Send Data to ManageEngine ServiceDesk Plus. Sends a custom set of Lucidum data to ManageEngine ServiceDesk Plus. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ManageEngine ServiceDesk Plus on a regular schedule. You can...
ManageEngine Endpoint Center Actions
Last Updated: September 23, 2025Actions for ManageEngine Endpoint Central Send Data to ManageEngine Endpoint Central. Sends a custom set of Lucidum data to ManageEngine Endpoint Central. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ManageEngine Endpoint Central on a regular schedule. You can...
LogRhythm Actions
Last Updated: September 23, 2025Actions for LogRhythm Send Data to LogRhythm. Sends a custom set of Lucidum data to LogRhythm. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to LogRhythm on a regular schedule. You can send normalized, enriched Lucidum data to LogRhythm to...
LogicMonitor Actions
Last Updated: September 23, 2025Actions for LogicMonitor Send Data to LogicMonitor. Sends a custom set of Lucidum data to LogicMonitor. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to LogicMonitor on a regular schedule. You can send normalized, enriched Lucidum data to LogicMonitor to...
KnowBe4 Actions
Last Updated: September 23, 2025Actions for KnowBe4 Send Data to KnowBe4. Sends a custom set of Lucidum data to KnowBe4. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to KnowBe4 on a regular schedule. You can send normalized, enriched Lucidum data to KnowBe4 to...
Kaspersky Security Center Actions
Last Updated: September 23, 2025Actions for Kaspersky Security Center Send Data to Kaspersky Security Center. Sends a custom set of Lucidum data to Kaspersky Security Center. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Kaspersky Security Center on a regular schedule. You can...
JumpCloud Actions
Last Updated: September 23, 2025Actions for JumpCloud Send Data to JumpCloud. Sends a custom set of Lucidum data to JumpCloud. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to JumpCloud on a regular schedule. You can send normalized, enriched Lucidum data to JumpCloud to...
Ivanti Unified Endpoint Manager Actions
Last Updated: September 23, 2025Actions for Ivanti Unified Endpoint Manager Send Data to Ivanti Unified Endpoint Manager. Sends a custom set of Lucidum data to Ivanti Unified Endpoint Manager. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Ivanti Unified Endpoint Manager on a...
Ivanti Security Controls Actions
Last Updated: September 23, 2025Actions for Ivanti Security Controls Send Data to Ivanti Security Controls. Sends a custom set of Lucidum data to Ivanti Security Controls. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Ivanti Security Controls on a regular schedule. You can...
Ivanti Endpoint Security Actions
Last Updated: September 23, 2025Actions for Ivanti Endpoint Security Send Data to Ivanti Endpoint Security. Sends a custom set of Lucidum data to Ivanti Endpoint Security. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Ivanti Endpoint Security on a regular schedule. You can...
Infoblox Actions
Last Updated: September 23, 2025Actions for Infoblox Send Data to Infoblox. Sends a custom set of Lucidum data to Infoblox. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Infoblox on a regular schedule. You can send normalized, enriched Lucidum data to Infoblox to...
Imperva Actions
Last Updated: September 22, 2025Actions for Imperva Send Data to Imperva. Sends a custom set of Lucidum data to Imperva. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Imperva on a regular schedule. You can send normalized, enriched Lucidum data to Imperva to...
List of Actions
Last Updated: March 27, 2025The published list of Actions is a living document. Lucidum releases new Actions according to customer needs. The current list of Actions reflects all the Actions currently in production at customer sites. If you need an Actionthat does not appear on the list, please contact your Lucidum Account Representative.
IBM QRadar Actions
Last Updated: September 22, 2025Actions for IBM QRadar Send Data to IBM QRadar. Sends a custom set of Lucidum data to IBM QRadar. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to IBM QRadar on a regular schedule. You can send normalized, enriched Lucidum...
Heimdal Security Actions
Last Updated: September 22, 2025Actions for Heimdal Security Send Data to Heimdal Security. Sends a custom set of Lucidum data to Heimdal Security. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Heimdal Security on a regular schedule. You can send normalized, enriched Lucidum...
Freshworks Actions
Last Updated: September 22, 2025Actions for Freshworks Send Data to Freshworks. Sends a custom set of Lucidum data to Freshworks. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Freshworks on a regular schedule. You can send normalized, enriched Lucidum data to Freshworks to...
Halo Service Solutions Actions
Last Updated: September 22, 2025Actions for Halo Service Solutions Send Data to Halo Service Solutions. Sends a custom set of Lucidum data to Halo Service Solutions. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Halo Service Solutions on a regular schedule. You can...
Fortra HelpSystems Actions
Last Updated: September 22, 2025Actions for Fortra Send Data to Fortra. Sends a custom set of Lucidum data to Fortra. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Fortra on a regular schedule. You can send normalized, enriched Lucidum data to Fortra to...
Fortinet FortiGate Actions
Last Updated: September 22, 2025Actions for Fortinet FortiGate Send Data to Fortinet FortiGate. Sends a custom set of Lucidum data to Fortinet FortiGate. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Fortinet FortiGate on a regular schedule. You can send normalized, enriched Lucidum...
F5 BIG-IQ Centralized Management Actions
Last Updated: September 22, 2025Actions for F5 BIG-IQ Centralized Management Send Data to F5 BIG-IQ Centralized Management. Sends a custom set of Lucidum data to F5 BIG-IQ Centralized Management. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to F5 BIG-IQ Centralized Management on a...
Exabeam Actions
Last Updated: September 22, 2025Actions for Exabeam Send Data to Exabeam. Sends a custom set of Lucidum data to Exabeam. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Exabeam on a regular schedule. You can send normalized, enriched Lucidum data to Exabeam to...
Dynatrace Actions
Last Updated: September 22, 2025Actions for Dynatrace Send Data to Dynatrace. Sends a custom set of Lucidum data to Dynatrace logs. Send Device to Dynatrace. Create a new device in Dynatrace, populated with Lucidum data. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to...
Digital Defense Fortra Vulnerability Manager (formerly Frontline VM) Actions
Last Updated: September 22, 2025Actions for Fortra VM Send Data to Fortra VM. Sends a custom set of Lucidum data to Fortra VM. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Fortra VM on a regular schedule. You can send normalized, enriched Lucidum...
Delinea Actions
Last Updated: September 22, 2025Actions for Delinea Send Data to Delinea. Sends a custom set of Lucidum data to Delinea. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Delinea on a regular schedule. You can send normalized, enriched Lucidum data to Delinea to...
Datadog Actions
Last Updated: September 22, 2025Actions for Datadog Send Data to Datadog. Sends a custom set of Lucidum data to Datadog. Create Incident. Create (declare) an incident in Datadog. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Datadog on a regular schedule. You can...
Databricks Actions
Last Updated: September 22, 2025Actions for Databricks Send Data to Databricks. Sends a custom set of Lucidum data to Databricks. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Databricks on a regular schedule. You can send normalized, enriched Lucidum data to Databricks to...
Darktrace Actions
Last Updated: September 22, 2025Actions for Darktrace Send Data to Darktrace. Sends a custom set of Lucidum data to Darktrace. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Darktrace on a regular schedule. You can send normalized, enriched Lucidum data to Darktrace to...
Cyderes Actions
Last Updated: September 19, 2025Actions for Cyderes Send Data to Cyderes. Sends a custom set of Lucidum data to Cyderes. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Cyderes on a regular schedule. You can send normalized, enriched Lucidum data to Cyderes to...
Cybereason Actions
Last Updated: September 19, 2025Actions for Cybereason Send Data to Cybereason. Sends a custom set of Lucidum data to Cybereason. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Cybereason on a regular schedule. You can send normalized, enriched Lucidum data to Cybereason to...
CyberArk Actions
Last Updated: September 19, 2025Actions for CyberArk Send Data to CyberArk. Sends a custom set of Lucidum data to CyberArk. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to CyberArk on a regular schedule. You can send normalized, enriched Lucidum data to CyberArk to...
CrowdStrike Falcon Endpoint Protection Actions
Last Updated: February 10, 2026Actions for CrowdStrike Falcon Endpoint Protection Send Data to CrowdStrike Falcon Endpoint Protection. Sends a custom set of Lucidum data to CrowdStrike Falcon Endpoint Protection. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to CrowdStrike Falcon Endpoint Protection on a...
Connectwise Automate Actions
Last Updated: September 19, 2025Actions for ConnectWise Automate Send Data to ConnectWise Automate. Sends a custom set of Lucidum data to ConnectWise Automate. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to ConnectWise Automate on a regular schedule. You can send normalized, enriched Lucidum...
Commvault Actions
Last Updated: September 19, 2025Actions for Commvault Send Data to Commvault. Sends a custom set of Lucidum data to Commvault. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Commvault on a regular schedule. You can send normalized, enriched Lucidum data to Commvault to...
Cisco Vulnerability Management (formerly Kenna VM) Actions
Last Updated: September 19, 2025Actions for Cisco Vulnerability Management Send Data to Cisco Vulnerability Management. Sends a custom set of Lucidum data to Cisco Vulnerability Management. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Cisco Vulnerability Management on a regular schedule. You can...
Cisco AppDynamics Actions
Last Updated: September 19, 2025Actions for Cisco AppDynamics Send Data to Cisco AppDynamics. Sends a custom set of Lucidum data to Cisco AppDynamics. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Cisco AppDynamics on a regular schedule. You can send normalized, enriched Lucidum...
Checkmarx Actions
Last Updated: September 19, 2025Actions for Checkmarx Send Data to Checkmarx. Sends a custom set of Lucidum data to Checkmarx. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Checkmarx on a regular schedule. You can send normalized, enriched Lucidum data to Checkmarx to...
Check Point Infinity Actions
Last Updated: September 19, 2025Actions for Check Point Infinity Send Data to Check Point Infinity. Sends a custom set of Lucidum data to Check Point Infinity. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Check Point Infinity on a regular schedule. You can...
BMC Helix CMDB Actions
Last Updated: September 19, 2025Actions for BMC Helix CMDB Send Data to BMC Helix CMDB. Sends a custom set of Lucidum data to BMC Helix CMDB. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to BMC Helix CMDB on a regular schedule. You can...
BitSight Actions
Last Updated: September 19, 2025Actions for BitSight Send Data to BitSight. Sends a custom set of Lucidum data to BitSight. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to BitSight on a regular schedule. You can send normalized, enriched Lucidum data to BitSight to...
BigPanda Actions
Last Updated: September 19, 2025Actions for BigPanda Send Data to BigPanda. Sends a custom set of Lucidum data to Bit Panda. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to BigPanda on a regular schedule. You can send normalized, enriched Lucidum data to BigPanda...
Barracuda Actions
Last Updated: September 19, 2025Actions for Barracuda Send Data to Barracuda. Sends a custom set of Lucidum data to Barracuda. Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Barracuda on a regular schedule. You can send normalized, enriched Lucidum data to Barracuda to...
Atera Actions
Last Updated: September 19, 2025Actions for Atera Send Data to Atera. Sends a custom set of Lucidum data to Atera Use Cases Below are the possible use cases for these actions: If you want to run Lucidum “headless”, you can send relevant data to Atera on a regular schedule. You can send normalized, enriched Lucidum data to Atera to...
Endpoints for Connectors and Connector Profiles
Last Updated: June 3, 2026You can use the Lucidum API to: Retrieve a list of connectors and the bridge name, display name, description, group, and status of each connector Retrieve configuration details about a single connector, including bridge name, display name, description, group, status, and additional configuration data Create a connector profile Retrieve details about all connector profiles, including...
Using Value-Oriented SmartLabels
Last Updated: March 18, 2026All SmartLabels appear in the Query Builder and can be used in dashboards and actions as you would use any data field. Dashboard with VOSLs The following example dashboard uses the Value-Oriented SmartLabels: Dept Risk Multiplier MAC Address Count Online Compute Title & Dept (Asset) VPC CIDR All the charts use very simply queries (usually...
Overview of Value-Oriented SmartLabels
Last Updated: June 18, 2026Introduction Lucidum includes a feature called SmartLabels. SmartLabels allow you to apply business rules to Lucidum data. For details on SmartLabels, see the chapter Creating and Managing SmartLabels. Lucidum includes pre-built SmartLabels, called Value-Oriented SmartLabels or VOSLs. You can find these VOSLs under the Lucidum SmartLabels tab in the SmartLabel Management page. VOSLs include common...
Notifications
Last Updated: March 16, 2026System Status Notifications At log in to the Lucidum system, if data ingestion is running, actions are running, SmartLabels are processing, or Lucidum is updating the database, you will see a system notification in a popup. Lucidum checks for these processes every five minutes. After seeing a system notification, Lucidum will check every one minute...
Ring Central
Last Updated: September 11, 2024What is Ring Central? RingCentral is a global provider of cloud-based, enterprise communications, video meetings, collaboration, and contact center. Why Should You Use the Ring Central Connector? The Ring Central connector provides visibility into devices and users in your environment. You can use this visibility to: ensure assets are managed per your security policies derive...
Protected: Meridian’s Machine Learning
Last Updated: June 18, 2026There is no excerpt because this is a protected post.
Cyera
Last Updated: September 9, 2024What is Cyera? Cyera AI-powered data security platform gives companies visibility over their sensitive data, context over the risk it represents, and actionable, prioritized remediation guidance. Why Should You Use the Cyera Connector? The Cyera connector provides visibility into the assets and data in your environment. You can use this visibility to: ensure assets and...
Snowflake Actions
Last Updated: September 24, 2025Actions for Snowflake Send Data. Sends a custom set of Lucidum data to SnowFlake. Use Cases Below are the possible use cases for the Send Data action: If you want to run Lucidum “headless”, you can send relevant data to Snowflake on a regular schedule. You can send data to Snowflake for storage and analysis....
Sonatype IQ Server
Last Updated: September 9, 2024What is the Sonatype IQ Server? The Sonatype IQ Server is the governance and policy management tool for the open-source components stored in the Nexus Repository. The Sonatype IQ server powers the Repository Firewall, Lifecycle, and Auditor solutions. Why Should You Use the Sonatype IQ Server? The connector provides visibility into the assets managed by...
Using Functions in SmartLabels
Last Updated: January 8, 2026Overview of Functions in SmartLabels To provide additional flexibility in SmartLabels, Lucidum provides functions that allow you to manipulate ingested data before including that data in a SmartLabel. For example, you can concatenate ingested data, apply a regular expression to ingested data, and perform mathematical actions like addition, division, subtraction, and multiplication on ingested data....
Zscaler Private Access
Last Updated: August 16, 2024What is Zscaler Private Access? The Zscaler Private Access (ZPA) service provides access to internal applications and services while ensuring the security of their networks. Unlike VPNs, which require users to connect to your network to access your enterprise applications, ZPA provides policy-based secure access only to the internal apps users need. With ZPA, application...
Zscaler Internet Access
Last Updated: June 1, 2026What is Zscaler Internet Access? Zscaler Internet Access (ZIA) is a secure web gateway (SWG) that delivers cloud native, AI-powered cyberthreat protection and zero trust access to the internet and SaaS apps. ZIA prevents advanced attacks and data loss with a comprehensive zero trust approach. Why Should You Use the Zscaler Internet Access Connector? The...
Zscaler Client Connector
Last Updated: August 16, 2024What is Zscaler Client Connector? Zscaler Client Connector is a lightweight agent for user endpoints, enabling hybrid work through secure, fast, reliable access to any app over any network. Why Should You Use the Zscaler Client Connector Connector? The Zscaler Client Connector connector provides visibility into the assets in your environment. You can use this...
Pritunl
Last Updated: August 16, 2024What is Pritunl? Pritunl is an open source, distributed VPN server for enterprise that provides up five layers of authentication to meet your security needs and includes auditing to assist in intrusion detection, improve security, and fulfill regulatory requirements. Why Should You Use the Pritunl Connector? The Pritunl connector provides visibility into the assets in...
Mice&Men DNS Management
Last Updated: August 16, 2024Men&Mice DNS Management is a DDI solution that orchestrates DNS, DHCP, and IPAM across various environments, including cloud and on-premises. Configuring the Connector for Men&Mice DNS Management To configure Lucidum to ingest data from Men&Mice DNS Management : Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find...
Overview of Meridian
Last Updated: June 18, 2026Meridian is a Data Fabric platform for security data that discovers every asset, every account, and every user, classifies newly discovered data, and calculates risk so you can be better prepared. Meridian is SaaS-based and requires minimal configuration or maintenance for customers. Meridian ingests read-only data from IT, operations, security, and HR solutions, and structured...
Use Cases for Dashboard
Last Updated: June 18, 2026After Meridian has ingested data, you can view dashboards and charts in the Dashboards page. These dashboards and charts provide insights into your environment. This chapter will show some common use cases for dashboards. For more use cases and dashboards, see the manual on Use Cases. All Assets and All Users Meridian finds uses connected...
Introduction to Proxy Server
Last Updated: June 19, 2026A proxy server allows Lucidum connectors that run on your SaaS account to fetch data securely from your on-premises assets. This document describes how to configure the proxy server.
Creating and Managing Roles
Last Updated: June 19, 2026Roles Roles allow you to finely control access to the Meridian system. A role combines: a set of Rights for tasks in Meridian a set of Field Permissions to view data that is ingested by Meridian Meridian includes default roles. You can also create custom roles to meet your needs. Default Roles Meridian includes default...
Enabling SSO
Last Updated: June 19, 2026SSO Support Meridian supports most SSO providers. This chapter describes how to configure your SSO to work with Meridian. To enable SSO login in Meridian, you must: enter information about your identity provider tool in the Meridian integration tool. if you use Okta, enter a specific value in the Okta field Default Relay State. create...
Overview of Dashboards
Last Updated: September 17, 2025Introduction This manual describes how to create and manage Lucidum dashboards. This chapter provides an overview of: Dashboards Charts Dashboards A dashboard is a page that displays one or more graphical charts. Each chart appears in its own pane and displays graphs, tables, and text. Each dashboard provides at-a-glance visibility into the assets, users, and...
Viewing a Dashboard
Last Updated: November 4, 2025What Can I View? By default, you can view the following types of dashboards: Dashboards in a channel you are a member of. This includes Lucidum Channels and Team Channels you are a member of or an admin for. Dashboards you create. For details on creating a dashboard, see the chapter on Creating a Dashboard....
Channels
Last Updated: November 3, 2025What is a Channel? Lucidum organizes dashboards with Channels. Channels not only organize dashboards but also allow role-based access. To view the initial Dashboards page, click on the Dashboards icon in the left pane. The Dashboards page organizes dashboards by Channels. Channels are groups that allow: Each user to manage personal dashboards Teams to share...
Introduction to Tags and Smart Labels
Last Updated: January 8, 2026Lucidum includes two types of user-defined fields to make repetitive tasks easier and to help organize assets and users: Tags and SmartLabels. The following sections describe how to create and use Tags and SmartLabels.
Overview of SmartLabels
Last Updated: March 13, 2026Introduction Lucidum includes a feature called SmartLabels. SmartLabels allow you to apply custom business rules to Lucidum data. If you need to write complex queries, SmartLabels can help save time and reduce errors. Unlike a saved query, SmartLabels can be combined and nested. So you can use a SmartLabel or a Tag within another SmartLabel....
Creating and Managing Tags
Last Updated: January 8, 2026Tags are keywords you can assign to assets or users in Lucidum. You can define both the tag and its value. Tags allow you to customize how you want to organize assets and users, using name:value pairs that work for your organization. This chapter describes how to view, create, use, and manage tags. Viewing Tags...
Examples for Tags and SmartLabels
Last Updated: January 8, 2026Create a Tag To Track Maintenance Tasks You could create a simple tag that tracks workstations that require maintenance. You could create a tag for assets named “Maintenance”. You could define the tag as Type List. You could then define possible tasks like “Retire”, “Wipe”, “Upgrade”. You could assign the Maintenance tag and a task...
Overview of Value-Oriented Dashboards
Last Updated: February 6, 2026Introduction Lucidum includes pre-built dashboards, called Value-Oriented Dashboards or VODs. VODs display common use cases to help you get immediate insights from Lucidum. Lucidum includes a feature called Dashboards. Dashboards allows you to view and create dashboards. Lucidum also includes pre-built dashboards, called Value-Oriented Dashboards or VODs. Value-Oriented Dashboards display common use cases, such as...
Identity Dashboards
Last Updated: April 23, 2026The pre-built Value-Oriented Dashboards include the following identity dashboards: Compliance: Entra ID MFA Status. Tracks compliance with MFA use (as tracked by Okta) and identifies non-compliant accounts. Compliance: Okta MFA Status. Tracks compliance with MFA use (as tracked by Okta) and identifies non-compliant accounts. Compliance: PingID MFA Status. Tracks compliance with MFA use (as tracked...
Security & IT Ops Dashboards
Last Updated: April 24, 2026The pre-built Value-Oriented Dashboards include the following Security & IT Ops dashboards: Action Items: Fixable Crits. This dashboard list critical vulnerabilities that have published fixes, workarounds, or mitigation. Action Items: OS EOL and Vuln Summary. The Action Items: OS EOL and Vuln Summary dashboard displays information about the operating systems in your environment, EOL operating...
Threat Intelligence Dashboards
Last Updated: February 6, 2026The pre-built Value-Oriented Dashboards include the following Threat Intelligence dashboards: Assets w/Top Exploited CVEs (CISA 2021). This dashboard displays information about assets with CVEs. Assets w/Top 15 Exploited CVEs (SentinelOne 2022). The Assets w/Top 15 Exploited CVEs dashboard displays information about assets where the top 15 most commonly exploited CVEs are active. Kaspersky Top-n APTS:...
Cloud Dashboards
Last Updated: April 22, 2026The pre-built Value-Oriented Dashboards include the following cloud dashboards: AWS All-in-One. This dashboard displays information about the AWS resources in your environment, including EC2 instances, S3 buckets, and security groups. Azure All-In-One. This dashboard displays information about the Azure instances (VMs, blob containers, and security groups) in your environment. Cloud Compute Costs. This dashboard displays...
Introduction to Risk
Last Updated: February 9, 2026Lucidum includes multiple risk measurements for assets and users. You can use these risk measurements to identify assets and users that require analysis and possible mitigation. The Lucidum platform helps you assess risk and mitigate vulnerabilities by finding and correlating data from your environment. Lucidum’s Machine Learning algorithms discover every asset, every account and user,...
Risk Measurements
Last Updated: February 9, 2026Risk Measurements Lucidum calculates the following risk measurements for each asset and user: Risk Factor Risk Score Risk Ranking Risk Level Lucidum also calculates an additional risk value for vulnerabilities and CVEs Lucidum Verified Risk. Risk Factor Risk Factors are known security risks that Lucidum has ingested. Some example risk factors are: Number of Known...
Introduction
Last Updated: September 29, 2025Sending Alerts to Slack The Lucidum application for Slack allows you to retrieve data from Lucidum directly from a Slack channel. You can then share Lucidum data directly with your team. This allows you to monitor issues and track burn-down rates together.
Creating and Managing User Accounts
Last Updated: June 19, 2026This chapter describes how to create and manage user account in Meridian. Changing the Admin Password To create the first user account, you must sign in with the default Admin account. Your Meridian sales representative can provide you with the default password for the Admin account. You should immediately change the password for the default...
Microsoft Sentinel Missing
Last Updated: September 25, 2025Lucidum can help you accurately identify assets that are not running Microsoft Sentinel. In most cases, you want Sentinel monitoring your corporate infrastructure. In this example, we define the corporate infrastructure as the “crown jewels”, those servers that are crucial to your business. After Lucidum ingests data from your security solutions, Lucidum uses graph data,...
Migrating Dynamic Fields to SmartLabels
Last Updated: January 8, 2026SmartLabels replace the older feature Dynamic Fields.Lucidum automatically migrates Dynamic Fields to SmartLabels. After upgrading to later versions of Lucidum, you will notice that: The Settings > Dynamic Field Management page is gone. All existing Dynamic Fields are automatically migrated to the new SmartLabel Management page (Left menu > SmartLabels icon). The new SmartLabel will...
Migrating Custom Fields to Tags
Last Updated: January 8, 2026Tags replace the older feature Custom Fields. Lucidum automatically migrates Custom Fields to Tags. After upgrading to later versions of Lucidum, you will notice that: The Settings > Custom Field Management page is gone. All existing Custom Fields are automatically migrated to the new Tag Management page (Left menu > Tags icon). The new Tag...
Overview of Tags
Last Updated: January 8, 2026Tags are keywords you can assign to assets or users in Lucidum. You can define both the tag and its value. For example, you could create a tag for assets named “Maintenance”. You could define the tag as Type List. You could then define possible projects like “Retire”, “Wipe”, “Upgrade”. You could assign the Maintenance...
Appendix: Data Types, Operators, and Regular Expressions
Last Updated: January 30, 2026Data Types Data Types describe the type of data inside a field. Different data types use different operators. For example, fields of type “Text” frequently use the operator match to find a specific string of text; fields of type “Numeric” frequently use arithmetic operators like “greater than” or “equal to”. In Lucidum, the data types...
Creating and Managing SmartLabels
Last Updated: March 13, 2026Introduction This chapter describes how to view, create, edit, and delete a SmartLabel. Viewing SmartLabels The SmartLabel Management page (Left menu > SmartLabels icon) displays information about existing SmartLabels. Tabs. The SmartLabels page includes three tabs: Lucidum SmartLabels tab. Lucidum includes pre-built SmartLabels, called Value-Oriented SmartLabels or VOSLs. You can find these VOSLs under the...
Appendix: Fields in the Lucidum Data Group
Last Updated: January 8, 2026Fields are dependent upon the Lucidum object specified in the Build Query from field. The Build Query from field specifies an object to examine. Choices are: Asset User Asset-IP Mapping User-IP Mapping Vulnerability Fields are characteristics of a Lucidum object. For example, a characteristic of a user is the user’s email address. A characteristic of...
Introduction to User Management
Last Updated: June 19, 2026Introduction Meridian includes easy-to-use tools to create and manage user accounts, create and manage roles for RBAC, and enable SSO integration. User Management in Meridian includes the following: Creating and managing user accounts Creating and managing roles Enabling SSO This manual will describe how to perform these tasks.
Second Step: Connectors
Last Updated: June 18, 2026To start using your Meridian system and gaining insights into the security of your environment, you must first allow Meridian to learn about your environment. To do this, Meridian uses connectors. Connectors enable Meridian to ingest data from your environment and discover, identify, and classify assets, data, and users. Meridian includes pre-built connectors for the...
First Step: User Accounts and Proxy Server
Last Updated: June 18, 2026On day-one, the first steps to get up and running with Meridian include: Creating user accounts. If you want Meridian to ingest data from on-premises hardware and software, you must configure a proxy server. Your Meridian Account Representative will guide you through these tasks. User Accounts Meridian includes role-based accounts, out of the box. To...
Introduction to Getting Started with Meridian
Last Updated: June 18, 2026Overview This Getting Started document includes information about the first few days with Meridian and some examples of the type of information and insights you can expect. Home Page If you have not pinned a dashboard, the Meridian Home Page appears upon log in. After pinning a dashboard, the pinned dashboard appears upon log in....
Managing Charts
Last Updated: November 6, 2025This chapter describes how to edit and manage the charts in your dashboards. Editing a Chart Lucidum allows you to edit an existing chart, copy a chart from one dashboard to another, and delete an existing chart from a dashboard. To edit a chart in a dashboard: Log in to your Lucidum system. In the...
Introduction to Dashboards
Last Updated: June 18, 2026After Meridian has ingested data, you can view dashboards and charts in the Dashboards page. These dashboards and Charts provide insights into your environment. This chapter provides an overview of the Dashboards page, charts, and dashboards to help you navigate the user interface. Home Page If you have not pinned a dashboard, the Meridian Home...
Inventory Dashboards
Last Updated: April 23, 2026The pre-built Value-Oriented Dashboards include the following inventory dashboards: Asset Inventory. This dashboard displays information about assets including data sources, risk level, critical vulnerabilities, location, type, operating systems, ISPs, CVEs, and users. Asset Overview w/Users. This dashboard displays details about assets including asset types, servers, VMs, workstations, mobile devices, containers, microservices, and information about users...
Configuring a Proxy Server
Last Updated: June 19, 2026The following sections describe how to build and configure a proxy server. A proxy server allows Lucidum connectors that run on your SaaS account to fetch data securely from your on-premises assets. Deploy and Prep the Virtual Machine or Server CAUTION: Although the proxy server will have a “Lucidum” name, the proxy server is not...
Email Actions
Last Updated: September 22, 2025Actions for Email Send Email. Sends data about one or more assets or users to one or more recipients. Use Cases Below are the possible use cases for the Send Email action: Send the IT team a list of Macintosh assets that are running the AMF agent but are not running the CarbonBlack agent. Send...
AWS Actions
Last Updated: October 22, 2025Actions for AWS S3 Lucidum allows you to automatically perform the following actions on assets that meet your criteria. You define the criteria for assets by creating a query. Send Data to AWS S3. Sends customized Lucidum data to AWS S3 for storage. Actions for AWS EC2 Lucidum allows you to automatically perform the following...
Active Directory Actions
Last Updated: September 19, 2025Actions for Active Directory Change Computer Group. Changes the AD group membership for one or more assets. Disable Computer. Disables one or more computer objects in AD. When a computer object is disabled in AD, domain accounts cannot log in to the computer. Enable Computer. Enables one or more computer objects in AD. When a...
Automox Actions
Last Updated: September 19, 2025Actions for Automox Patch Device. Applies all available software patches to one or more devices. Reboot Device. Reboots one or more devices. Use Cases Below are the possible use cases for these actions: Patch Device. You could patch devices that are out-of-date to mitigate potential vulnerabilities Reboot Device. You could reboot devices after installing updates....
Crowdstrike Falcon LogScale Actions
Last Updated: September 19, 2025Action for Crowdstrike Falcon LogScale Send Data to Logscale. Sends a custom set of Lucidum data to Crowdstrike Falcon LogScale. Prerequisites Before you can execute actions on LogScale devices, you must first: Configure an API connection to LogScale. To do this, see the instructions for creating a LogScale connector in Lucidum: CrowdStrike Falcon LogScale. Workflows...
Elastic Cloud Actions
Last Updated: September 22, 2025Actions for Elastic Cloud Send to Elastic Cloud Index. Sends a custom set of Lucidum data to Elastic Cloud. Use Cases Below are the possible use cases for this action: If you want to run Lucidum “headless”, you can send relevant data to Elastic Cloud on a regular schedule. You can send data to Elasticsearch...
Overview of Actions and Actions Workflows
Last Updated: January 23, 2026What Are Actions? Lucidum includes a feature called Actions. Actions are automations that are triggered by query results. Actions include sending email messages, posting a message to slack, creating tickets, isolating infected devices, or making changes to Active Directory, among other options. For example, you can define an action that sends an email to the...
VMware Workspace ONE
Last Updated: June 29, 2024What is VMware Workspace ONE UEM? VMware Workspace ONE UEM is a cloud-native solution for unified endpoint management (UEM) of any device (desktop, mobile, wearables, rugged, IoT) for any use case. Why Should You Use the VMware Workspace ONE UEM Connector? The VMware Workspace ONE UEM connector provides visibility into the assets in your environment....
VMware Virtualization Platform
Last Updated: July 8, 2024What is VMware Virtualization Platform (vSphere)? VMware Virtualization Platform (also called vSphere) allows businesses to virtualize physical servers to consolidate resources and enhance availability. The two core components of vSphere are ESXi and vCenter Server. ESXi is the virtualization platform where you create and run virtual machines and virtual appliances. vCenter Server provides a centralized...
VMware vCloud Director (VCD)
Last Updated: July 17, 2024VMware vCloud Director (VCD) is a cloud services platform that delivers secure, isolated, and elastic virtual data center compute, network, storage, and security in a self-service model. Parameters URL (required): The URL of the VMware vCloud Director API. Username and Password (required): VMware vCloud Director username and password for a user with permissions to access the APIs....
VMware Tanzu Application Service (TAS)
Last Updated: July 13, 2024VMware Tanzu Application Service (TAS) (formerly Pivotal Cloud Foundry) is an app development and deployment platform for public and private clouds. Tanzu Application Service is the VMware commercial implementation of the open source Cloud Foundry project. Parameters URL (required): The URL of the VMware TAS API Username and Password (required): VMware TAS username and password Verify SSL (optional,...
VMware Carbon Black Endpoint
Last Updated: August 13, 2024What is VMware Carbon Black Endpoint? VMware Carbon Black Endpoint is a next-generation antivirus (NGAV) and behavioral endpoint detection and response (EDR) solution that protects against the full spectrum of modern cyber-attacks. VMware Carbon Black Cloud includes a universal agent and a console. Why Should You Use the VMware Carbon Black Endpoint Connector? The VMware...
VMware Carbon Black Cloud Workload
Last Updated: August 13, 2024What is VMware Carbon Black Cloud Workload? VMware Carbon Black Cloud Workload (formerly Carbon Black Cloud Workload) is a data center security product that protects your workloads running in a virtualized environment. Why Should You Use the VMware Carbon Black Cloud Workload Connector? The VMware Carbon Black Cloud Workload connector provides visibility into the assets...
VMware Carbon Black Cloud Audit and Remediation
Last Updated: June 29, 2024VMware Carbon Black Cloud Audit and Remediation (formerly VMware CB LiveOps) combines query and response, next-generation antivirus, endpoint detection and response, and managed threat hunting services, in real-time, within a single console and from a single agent. Parameters URL (required): The URL of the VMware Carbon Black Cloud Audit and Remediation API Organization Key (required): The organization...
Vercara UltraDNS
Last Updated: July 17, 2024Vercara UltraDNS (formerly Neustar UltraDNS) is a cloud-based authoritative DNS service that includes fault-tolerant globally redundant architecture, full primary, secondary, and hidden master support, advanced traffic management, advanced reporting, and security features like DNSSEC protection, two-factor authentication, access control lists, audit logs, and a TLS protected portal. Parameters URL (required): The URL of the Vercara UltraDNS...
Venafi Trust Protection Platform
Last Updated: June 29, 2024Venafi Trust Protection Platform is an enterprise key and certificate management solution that secures and protects encryption assets across diverse operating systems and infrastructure environments. Within these environments, Venafi Trust Protection Platform centralizes the management of authentication and encryption technologies across server-side platforms, desktops, laptops, applications, and appliances where vital data resides and is transmitted....
Veeam Backup & Replication
Last Updated: July 13, 2024Veeam Backup & Replication is a comprehensive data protection and disaster recovery solution. Veeam Backup & Replication creates image-level backups of virtual, physical, and cloud machines and restores from them. Veeam Backup & Replication technology optimizes data transfer and resource consumption and provides a centralized console for administering backup, restore, and replication operations. Parameters Host (required): The hostname or IP address of the Veeam server...
Vectra AI
Last Updated: June 29, 2024The Vectra AI Platform provides hybrid attack-surface visibility across identity, public cloud, SaaS, data center networks, and endpoints via Extended Detection and Response (XDR) integration. With patented AI-driven Attack Signal Intelligence, the Vectra AI Platform prioritizes real attacks in real-time with integrated, automated, and co-managed responses. Configuring the Connector for Vectra AI To configure Lucidum...
Using Connectors
Last Updated: December 16, 2025Connectors allow Lucidum to ingest data from your environment and discover, identify, and classify assets, data, and users. Lucidum includes pre-built connectors for the most commonly used solutions for security, vulnerability scanning, cloud, data warehouse, identity management, logs, network, endpoint management, IP management, file sharing, and devops. Profiles To configure a connector, you provide credentials...
Uptycs
Last Updated: June 29, 2024What is Uptycs? Uptycs is a cloud security platform for large hybrid cloud environments. Uptycs protects workloads on servers, laptops, containers, and cloud while extending security visibility from development to runtime. Why Should You Use the Uptycs Connector? The Uptycs connector provides visibility into the assets in your environment. You can use this visibility to:...
UpGuard Vendor Risk
Last Updated: April 21, 2026What is Upguard Vendor Risk? UpGuard Vendor Risk (formerly UpGuard CyberRisk) is a vendor risk management software that discovers cyber risks from third-party vendors, prevents third-party data breaches, and complies with regulations. UpGuard Vendor Risk combines security ratings, security questionnaires, data leak detection, security profiles, and risk assessment workflows to provide a complete view of...
Universal SSH Key Manager
Last Updated: July 9, 2024Universal SSH Key Manager (UKM) is a Zero Trust SSH key management solution that automates the governing of SSH keys according to compliance and security standards. UKM discovers, monitors, remediates, and manages SSH keys and SSH key processes and accounts to mitigate risks. Parameters URL (required): The URL of the Universal SSH Key Manager API. API...
UniFi Controller
Last Updated: June 29, 2024UniFi Controller is a wireless network management software solution from Ubiquiti Networks. UniFi Controller allows you to manage multiple wireless networks using a web browser. Configuring the Connector for UniFi Controller To configure Lucidum to ingest data from the UniFi Controller: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
UKG Pro
Last Updated: March 12, 2026What is UKG Pro? UKG Pro (formerly Ultimate Software UltiPro) is a human capital management suite that manages personnel data, payroll tasks, scheduling, and helps attract, nurture, and grow your talent. Why Should You Use the UKG Pro Connector? The UKG Pro connector provides visibility into the assets in your environment. You can use this...
Tufin SecureTrack+
Last Updated: June 29, 2024Tufin SecureTrack+ (formerly Tufin SecureTrack) is a firewall and security management solution. Tufin SecureTrack+ centralizes policy management, risk mitigation, and compliance monitoring for firewalls, NGFWs, routers, switches, SDN, and hybrid cloud. Tufin SecureTrack+ prioritizes risks and mitigates vulnerabilities. Parameters URL (required): The URL of the Tufin SecureTrack+ API. Username and Password (required): Tufin SecureTrack+ username and password....
Trend Micro Worry-Free Services
Last Updated: July 17, 2024Trend Micro Worry-Free Services is an all-in-one, lightweight agent with an intuitive, cloud-based console. Trend Micro Worry-Free Services provides visibility and control across your entire organization. Machine Learning analyzes files not only before execution, but also during runtime for more reliable protection. Trend Micro Worry-Free Services also provides data loss prevention (DLP), disc encryption, and...
Trend Micro Vision One
Last Updated: June 29, 2024What is Trend Micro Vision One? Trend Micro Vision One is an XDR (extended detection and response) platform that enhances and consolidates detection, investigation, and response capabilities across email, endpoints, servers, cloud workloads, and networks. Why Should You Use the Trend Micro Vision One Connector? The Trend Micro Vision One connector provides visibility into the...
Trend Micro Cloud App Security
Last Updated: June 29, 2024Trend Micro Cloud App Security protects incoming and internal emails from Microsoft 365 and Gmail against advanced malware and other threats. Trend Micro Cloud App Security also enforces compliance on other cloud file-sharing and collaboration services, including Box, Dropbox, Google Drive™, Microsoft SharePoint online, Microsoft OneDrive for business, and Microsoft Teams. Parameters URL (required): The URL...
Trellix ePolicy Orchestrator
Last Updated: July 9, 2024Trellix ePolicy Orchestrator (ePO) monitors and manages your network, collects data on events and alerts, creates reports, and automates workflow to streamline product deployments, patch installations, and security updates. Configuring the Connector for Trellix ePolicy Orchestrator To configure Lucidum to ingest data from Trellix ePolicy Orchestrator: Log in to Lucidum. In the left pane, click Connector....
Trellix Endpoint Security (HX)
Last Updated: July 13, 2024Trellix Endpoint Security (HX) (formerly FireEye Endpoint Security (HX)) can be deployed as an on-premise hardware appliance, a virtual appliance, or through a cloud instance. Trellix Endpoint Security (HX) monitors each endpoint device or host, collecting real-time data of events, identifying threat activity collecting forensic data, and quarantining endpoints if necesary. Configuring the Connector for...
Torii
Last Updated: July 13, 2024Torri is a Distributed SaaS Management Platform that discovers and maps all cloud applications, licenses, and users and automates daily SaaS-related tasks. Parameters URL (required): The URL of the Torii API, for example, https://api.toriihq.com. API Key (required): Torii API key. Verify SSL (optional, default is false): Verify the SSL certificate or not.
TOPdesk Enterprise Service Management (ESM)
Last Updated: July 13, 2024TOPdesk Enterprise Service Management (ESM) is a self-service portal that manages request to IT, Facilities, and HR from a single platform. TOPdesk includes automated ticketing and lets you easily assign and share calls, tickets, and projects. Parameters URL (required): The URL of the TOPdesk Enterprise Service Management API. Username and Password (required): TOPdesk Enterprise Service Management username...
Thinkst Canary
Last Updated: June 29, 2024Thinkst Canary is a breach-detection device that can be deployed on your network in minutes. The device launches Canaries that look like valuable systems on your network offering up attractive resources to attackers. The Thinkst Canary device can be Virtual (VMware / Hyper-V), Cloud based (AWS/Azure/GCP) or a Physical device and is cloud-managed. Parameters URL (required):...
Teqtivity
Last Updated: June 29, 2024Teqtivity (formerly TeQube Teqtivity) is an IT asset management (ITAM) that provides complete visibility and control of tangible and intangible assets throughout their lifecycles. Teqtivity provides entire asset histories including point of origin, assignments, inventories within storage locations, and assigned end users and generates reports for audits and analysis. Parameters URL (required): The URL of the...
Tenable Vulnerability Management
Last Updated: June 29, 2024What is Tenable Vulnerability Management? Tenable Vulnerability Management (formerly Tenable.io) identifies and prioritizes vulnerabilities (including external threats and internal misconfigurations) based on risk to your business. Why Should You Use the Tenable Vulnerability Management Connector? The Tenable Vulnerability Management connector provides visibility into the assets in your environment. You can use this visibility to: ensure...
Tenable Security Center
Last Updated: June 29, 2024What is Tenable Security Center? Tenable Security Center (formerly Tenable SC) is a vulnerability management solution for distributed and complex IT infrastructure. Tenable Security Center consolidates and evaluates vulnerability data, illustrates vulnerability trends over time, and assesses risk with actionable context. Why Should You Use the Tenable Security Center Connector? The Tenable Security Center connector...
Tenable OT Security
Last Updated: July 17, 2024What is Tenable OT? The Tenable OT (formerly previously Indegy Industrial Cybersecurity Suite) protects industrial networks from cyber threats, malicious insiders, and human error. Tenable OT includes threat detection and mitigation, asset tracking, vulnerability management, configuration control, and Active Query checks. Why Should You Use the Tenable OT Connector? The Tenable OT connector provides visibility...
Tenable Nessus
Last Updated: July 8, 2024What is Tenable Nessus? Tenable Nessus is a vulnerability scanning platform for auditors and security analysts. Tenable Nessus pushes updated definitions to systems every day. Why Should You Use the Tenable Nessus Connector? The Tenable Nessus connector provides visibility into current vulnerabilities in your environment. You can use this visibility to: ensure assets are managed...
Tenable Cloud Security
Last Updated: June 29, 2024Tenable Cloud Security (formerly Ermetic) is a cloud Native Application Protection Platform (CNAPP) that secures your cloud infrastructure from development to runtime, continuously analyzing all your cloud resources — infrastructure, workloads, data, identities and applications — to prioritize risks, identify threats, deliver actionable insights, and remediate remediating risky entitlements, excess privilege, and misconfigurations at scale....
TeamViewer Remote Management
Last Updated: June 29, 2024TeamViewer Remote Management is an IT management platform integrated into a secure remote desktop access tool. The platform protects and remotely monitors devices, to manage IT assets, and store the data in a secure cloud backup. TeamViewer Remote Management monitors and manages assets, provides endpoint protection, backups assets, and monitor the availability and response times...
TCPWave DDI
Last Updated: June 29, 2024TCPWave DDI (formerly TCPWave IPAM) enables network administrators to automate the allocation and de-allocation of IP address resources. The TCPWave DDI solution dynamically manages available IP address space according to policies and provides a GUI to manage Domain Name System (DNS) and Dynamic Host Configuration Protocol (DHCP) services. Parameters URL (required): The URL of the TCPwave...
Tanium Discover
Last Updated: June 1, 2026What is Tanium Discover? Tanium Discover scans networks with hundreds of thousands of endpoints to find unmanaged assets. Administrators can choose to block the devices or bring them under management. Why Should You Use the Tanium Discover Connector? The Tanium Discover connector provides visibility into the endpoints in your environment. You can use this visibility...
Tailscale
Last Updated: June 29, 2024Tailscale is a VPN service that makes devices and applications accessible anywhere in the world, securely and effortlessly. Tailscale enables encrypted point-to-point connections using the open source WireGuard protocol, which ensures that only devices on the private network can communicate with each other. Configuring the Connector for Tailescale To configure Lucidum to ingest data from...
Tableau
Last Updated: September 15, 2025What is Tableau? Tableau is an analytics platform for harmonizing, managing, and exploring data with interactive visualizations. You can combine and manage data from multiple sources, including Salesforce data, in the Tableau platform. Tableau includes built-in data governance, security and compliance. Why Should You Use the Tableau Connector? The Tableau connector provides visibility into the...
Syxsense Secure
Last Updated: July 13, 2024Syxsense Secure provides a cloud-native, unified endpoint management (UEM) with powerful no-code automation. Syxsense Secure allows users to set up automated playbooks, respond to IT and security risks, and demonstrate compliance. Parameters URL (required): The URL of the Syxsense API. API Key (required): Syxsense API key. Verify SSL (optional, default is false): Verify the SSL certificate or not....
Symantec Endpoint Protection
Last Updated: June 29, 2024What is Symantec Endpoint Protection? Symantec Endpoint Protection (SEP) is a client-server solution that protects laptops, desktops, and servers in your network against malware, risks, and vulnerabilities. Why Should You Use the Symantec Endpoint Protection Connector? The Symantec Endpoint Protection connector provides visibility into the assets in your environment. You can use this visibility to:...
Symantec Endpoint Management Suite
Last Updated: July 9, 2024What is Symantec Endpoint Management Suite? Symantec Endpoint Management Suite (formerly Altiris) provides systems management, endpoint security, backup and recovery. The Symantec Endpoint Management Suite connector uses SQL to fetch information about devices. Why Should You Use the Symantec Endpoint Management Suite Connector? The Symantec Endpoint Management Suite connector provides visibility into the assets in...
Symantec Data Loss Prevention (DLP)
Last Updated: July 12, 2024Symantec Data Loss Prevention (DLP) solution prevents data breaches and safeguards your reputation. Symantec Data Loss Prevention provides comprehensive discovery, monitoring, and protection for total visibility and control over your confidential data, everywhere it goes. Parameters Host (required): The hostname or IP address of the Oracle Server used by the Symantec DLP instance. Port (required): The port...
Symantec Control Compliance Suite (CCS)
Last Updated: July 12, 2024Symantec Control Compliance Suite (CCS) automates IT assessments for applications, cloud, databases, endpoints, network devices, and servers based on security configuration, permissions, patches and vulnerabilities. CCS ensures compliance with external mandates through written policy creation, dissemination, acceptance logs, and exception management. CCS then scores assessment results against specified risk criteria. Parameters URL (required): The URL of...
Symantec Cloud Workload Protection (CWP)
Last Updated: July 12, 2024Symantec Cloud Workload Protection (CWP) provides a cloud-based security solution that protects instances on Amazon Web Services, Microsoft Azure, Google Cloud Platform (GCP) and Oracle Cloud. Cloud Workload Protection discovers the software stacks that are deployed on the instances and then makes recommendations for protection and also detects changes that violate security policies. Parameters URL (required):...
Sunbird dcTrack
Last Updated: June 29, 2024Sunbird dcTrack is a data center infrastructure management (DCIM) solution that provides real-time data about critical facilities, networks, and IT assets. dcTrack provides detailed information, visual mappings, business intelligence, and analytics about your infrastructure that help you make informed capacity management decisions and manage data center assets. Parameters Host (required): The hostname or IP address of...
Sumo Logic
Last Updated: June 29, 2024What is Sumo Logic? Sumo Logic is an all-in-one data analytics platform focused on Security, Operations, and Business Intelligence use cases. Why Should You Use the Sumo Logic Connector? The Sumo Logic connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies...
StatusCake
Last Updated: June 29, 2024What is StatusCake? StatusCake monitors server metrics, such as RAM, disk usage, CPU usage, uptime, page speed, domain, and SSL certificates. Why Should You Use the StatusCake Connector? The StatusCake connector provides visibility into the servers in your environment. You can use this visibility to: ensure assets are managed per your security policies find configuration...
Splunk
Last Updated: June 29, 2024What is Splunk? Splunk Enterprise is a software product that enables you to search, analyze, and visualize the data gathered from the components of your IT infrastructure or business. Splunk Enterprise takes in data from websites, applications, sensors, devices, and so on. After you define the data source, Splunk Enterprise indexes the data stream and...
Spiceworks
Last Updated: June 29, 2024Spiceworks offers free cloud-based help desk and network monitoring solutions designed for IT professionals and systems administrators. These solutions includes tools that manage inventory, help desk, connectivity, and vendor contracts. Parameters Host (required): The hostname or IP address of the Spiceworks server. Username and Password (required): Spiceworks username and password. Verify SSL (optional, default is false): Verify the...
Specops Inventory
Last Updated: June 29, 2024Specops Inventory is a Group Policy based inventory solution. Specops Inventory collects and reports information on hardware, software, registry, user settings, operating system, security data, and Active Directory data. Specops inventory provides tools for license compliance needs. Parameters Host (required): The hostname or IP address of the Microsoft SQL Server used by the Specops Inventory instance.Port (required):...
Spacewalk
Last Updated: June 29, 2024Spacewalk is an open source Linux systems management solution. Spacewalk manages software content updates for Red Hat derived distributions. Spacewalk also provides provisioning capabilities, allowing you to manage your systems throughout their lifecycle. Parameters Host (required): The hostname or IP address of the Spacewalk server. Username and Password (required): Spacewalk username and password. Verify SSL (optional, default is...
SOTI MobiControl
Last Updated: June 29, 2024SOTI MobiControl is an Enterprise Mobility Management (EMM) solution tracks, manages, and secures mobile devices from unboxing to retirement. SOTI MobiControl provides visibility and control over any device. Parameters Host (required): The hostname or IP address of the SOTI MobiControl server. Client ID and Client Secret (required): SOTI MobiControl API client ID and secret. For details on...
Sophos Endpoint Protection
Last Updated: June 29, 2024What is Sophos Endpoint Protection? Sophos Endpoint Protection provides anti-malware, application control, data loss prevention (DLP), intrusion prevention (IPS), and mobile device management. Why Should You Use the Sophos Endpoint Protection Connector? The Sophos Endpoint Protection connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed...
Sophos Central
Last Updated: June 29, 2024What is Sophos Central? Sophos Central is a solution for managing all your Sophos next-gen technologies, including endpoint, server, mobile, firewall, ZTNA, email, encryption, and more. Why Should You Use the Sophos Central Connector? The Sophos Central connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are...
SonicWall SonicOS
Last Updated: June 29, 2024What is SonicWall SonicOS? SonicWall SonicOS and SonicOSX (SonicOS/X) is the operating system that runs on SonicWall firewalls and provides the web management interface, API, and the Command Line Interface for firewall configuration. Why Should You Use the SonicWall SonicOS Connector? The SonicWall SonicOS connector provides visibility into the assets in your environment. You can...
SonicWall Network Security Manager
Last Updated: June 29, 2024What is SonicWall Network Security Manager? SonicWall Network Security Manager (NSM) orchestrates firewall operations and manages threats and risks across your firewall ecosystem. Why Should You Use the SonicWall Network Security Manager Connector? The SonicWall Network Security Manager connector provides visibility into the users and assets in your environment. You can use this visibility to:...
SolarWinds
Last Updated: March 28, 2025What is SolarWinds Network Performance Monitor? SolarWinds Network Performance Monitor (NPM) is a network monitoring system the provides comprehensive discovery and monitoring and dynamic mapping tools for on-premises, hybrid, and cloud. Why Should You Use the SolarWinds Connector? The SolarWinds connector provides visibility into the assets in your environment. You can use this visibility to:...
Snyk
Last Updated: June 29, 2024What is Snyk? Snyk is a platform that allows you to scan, prioritize, and fix security vulnerabilities in your code, open-source dependencies, container images, and infrastructure as code configurations. Why Should You Use the Snyk Connector? The Snyk connector provides visibility into the projects and users in your environment. You can use this visibility to:...
Snow Software
Last Updated: June 29, 2024What is Snow Software? Snow Software provides SaaS management, software asset management, and cloud cost management. Why Should You Use the Snow Software Connector? The Snow Software connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between assets, users,...
Snipe-IT
Last Updated: June 29, 2024What is Snipe-IT? Snipe-IT is an asset management system that enables IT departments to track assets, asset owners, purchase information, software licensing, and support information. Why Should You Use the Snipe-IT Connector? The Snipe-IT connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your...
Smartsheet
Last Updated: August 1, 2024What is Smartsheet? Smartsheet is a SaaS-based solution that enables teams to plan and manage projects, collaborate, track and visualize work, automate processes, and scale programs. Why Should You Use the Smartsheet Connector? The Smartsheet connector provides visibility into the users and data in your environment. You can use this visibility to: ensure assets are...
Slack
Last Updated: June 29, 2024What is Slack? Slack is a messaging app for business that includes chat and collaboration tools. Why Should You Use the Slack Connector? The Slack connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between assets, users, applications, and...
Skybox Firewall Assurance
Last Updated: June 29, 2024Skybox Firewall Assurance ensures and demonstrates proper configuration of network devices and security controls in accordance with CIS hardening. Skybox Firewall Assurance manages traditional, next-gen, virtual, and cloud-based firewalls and secure access service edge (SASE) solutions from multiple vendors. Parameters URL (required): The URL of the Skybox Firewall Assurance API. Username and Password (required): Skybox Firewall Assurance...
Site24x7
Last Updated: June 29, 2024What is Site24x7? Site24x7 is an all-in-one monitoring solution for cloud-scale applications that keeps track of websites, servers, applications, network, and cloud. Site24x7 manages metrics, traces, and logs under one console for different layers of cloud architecture. Why Should You Use the Site24x7 Connector? The Site24x7 connector provides visibility into the assets in your environment....
SimpleMDM
Last Updated: June 29, 2024SimpleMDM is a mobile device management solution that licenses, configures, monitors, and updates Apple devices. SimpleMDM provides remote management of operating system (OS) updates, device inventory, company data, and app management. Parameters URL (required): The URL of the SimpleMDM API, for example, https://a.simplemdm.com API Key (required): SimpleMDM API key. To retrieve your API key, sign into your SimpleMDM...
Signal Sciences
Last Updated: June 29, 2024What is Signal Sciences? Signal Sciences is a software as a service (SaaS) company that offers security monitoring and defense for web applications, APIs, and microservices. Signal Sciences includes next-generation web application firewalls (WAF) and runtime application self-protection (RASP). Why Should You Use the Signal Sciences Connector? The Signal Sciences connector provides visibility into the...
Shodan
Last Updated: June 29, 2024What is Shodan? Shodan is a search engine that gathers information about all devices directly connected to the Internet. If a device is directly hooked up to the Internet, Shodan can query it for various publicly-available information. The types of devices that Shodan indexes vary tremendously, ranging from small desktops up to nuclear power plants...
ServiceNow
Last Updated: September 12, 2025What is ServiceNow? ServiceNow is a software company that provides a cloud-based, AI-driven platform for automating multiple management workflows in enterprises. ServiceNow provides IT service management, IT operations management (ITOM), and IT business management (ITBM). Why Should You Use the ServiceNow Connector? The ServiceNow connector provides visibility into the assets in your environment. You can...
Server Message Block
Last Updated: July 17, 2024What is Server Message Block? The Server Message Block (SMB) protocol is a client-server communication protocol that enables shared access to files, directories, printers, serial ports, and other resources on a network. It also provides an authenticated inter-process communication (IPC) mechanism. Why Should You Use the Server Message Block Connector? The Server Message Block connector...
Sentry
Last Updated: June 29, 2024What is Sentry? Sentry is a crash reporting platform that provides you with “real-time insight into production deployments with info to reproduce and fix crashes”. It notifies you of exceptions or errors that your users run into while using your app and organizes them for you on a web dashboard. Why Should You Use the...
SentinelOne Singularity XDR
Last Updated: June 29, 2024What is SentinelOne Singularity XDR? SentinelOne Singularity XDR (formerly SentinelOne) provides detection and response capabilities across multiple security layers, including endpoint, cloud, identity, network, and mobile and provides analytics and automated responses. Why Should You Use the SentinelOne Singularity XDRConnector? The SentinelOne Singularity XDR connector provides visibility into the assets in your environment. You can...
SentinelOne Singularity Network Discovery
Last Updated: June 29, 2024SentinelOne Singularity Network Discovery (formerly SentinelOne Ranger) is a real-time, network attack surface control solution that finds and fingerprints all IP-enabled devices on your network. Network Discovery identifies and recovers unsecured endpoints with configurable, automated peer-to-peer agent/sensor deployment, to quickly plug gaps in your attack surface. Parameters URL (required): The URL of the SentinelOne Singularity Network...
Sensu Go
Last Updated: June 29, 2024Sensu Go is a solution for monitoring and observability at scale. Sensu Go provides visibility into traditional server closets, containers, applications, and cloud. Parameters URL (required): The URL of the Sensu API. Username and Password (required): Sensu username and password. Verify SSL (optional, default is false): Verify the SSL certificate or not. API Documentation API version V2 https://docs.sensu.io/
Secureworks Taegis XDR
Last Updated: June 29, 2024Secureworks Taegis XDR (formerly Secureworks Red Cloak) is a threat-intelligence-based security analytics platform with built-in security context. Secureworks Taegis XDR allows you to detect, investigate, and respond to advanced threats across your endpoints, network, and cloud environments. Parameters URL (required): The URL of the Secureworks Taegis XDR API, for example, https://api.ctpx.secureworks.com. Client ID and Client Secret (required): Secureworks...
Secureworks Taegis VDR
Last Updated: June 29, 2024Secureworks Taegis VDR provides a risk-based approach to vulnerability management, prioritizing the most critical vulnerabilities and informed by context from your environment and constantly updated threat intelligence. Parameters URL (required): The URL of the Secureworks Taegis VDR API, for example, https://us2.vdr.secureworks.com. Authorization Code (required): Secureworks Taegis VDR API authorization code. Verify SSL (optional, default is false): Verify the SSL...
SecureW2 JoinNow MultiOS
Last Updated: July 17, 2024SecureW2 JoinNow MultiOS provides a portal and guided workflows for employees to self-configure their unmanaged devices/BYODs for certificate-based authentication. SecureW2 JoinNow MultiOS also provides logs and reports for monitoring and troubleshooting. Parameters URL (required): The URL of the SecureW2 API, for example, https://api.securew2.com. API Key (required): SecureW2 API key. Log in to the SecureW2 portal and refer to...
Sectigo Certificate Manager (SCM)
Last Updated: July 13, 2024Sectigo Certificate Manager (SCM) is a universal platform that manages the lifecycles of digital certificates to secure every human and machine identity across your enterprise. SCM automates the issuance and management of Sectigo certificates, alongside those from other publicly trusted Certificate Authorities (CAs) and private CAs. Parameters Host (required): The hostname or IP address of the...
ScopNET
Last Updated: June 29, 2024ScopNET is a next generation, network access control (NAC). ScopNET provides an agentless solution for the prevention of unauthorized access to corporate networks, integrating switches, routers and firewalls to detect alien devices. Parameters Host (required): The hostname or IP address of the Microsoft SQL Server used by the ScopNET instance. Port (required): The port of the Microsoft...
ScienceLogic
Last Updated: June 29, 2024What is ScienceLogic SL1? SL1 is an ITOM (IT operations management) tool that provides monitoring of hybrid cloud infrastructure, improved service visibility, and automation of IT workflows. Why Should You Use the ScienceLogic SL1 Connector? The ScienceLogic SL1 connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets...
Schneider Electric EcoStruxure IT
Last Updated: June 29, 2024Schneider Electric EcoStruxure IT is a vendor-neutral data center infrastructure management (DCIM) solution that enables resilient, secure, and sustainable IT data centers. Schneider Electric EcoStruxure IT offers business continuity with secure monitoring, management, planning, and modeling from a single IT rack to hyper-scale IT, on-premises, in the cloud, and at the edge. Parameters URL (required): The...
Scale Computing HyperCore
Last Updated: July 17, 2024What is Scale Computing? Scale Computing HyperCore is a hypervisor and virtualization platform. All components (storage, virtualization, software and hardware) interface directly through the HyperCore hypervisor and SCRIBE storage layers to create a computing platform that can be deployed anywhere from the data center to the edge of the network. Why Should You Use the...
Saviynt Enterprise Identity Cloud (EIC)
Last Updated: July 12, 2024Saviynt Enterprise Identity Cloud (EIC) is an identity governance and administration solution that governs identities and their access on-premises or on the cloud. Saviynt EIC provides identity governance and administration (IGA), privileged access management (PAM), External identity and risk management, and application access governance (AAG/GRC). Parameters URL (required): The URL of the Saviynt Enterprise Identity Cloud...
SAP Concur
Last Updated: June 29, 2024SAP Concur provides solutions for integrated travel, expense, and invoice management. The solutions automation and AI analytics to monitor spending, improve compliance, and avoid blind spots. Parameters URL (required): The URL of the SAP Concur API. Username and Password (required): SAP Concur username and password. The user must have list users/read all users permissions. Client ID and Client Secret (required): SAP...
Samsung Knox
Last Updated: June 29, 2024Samsung Knox Manage is a cloud-based Unified Endpoint Management (UEM) solution that deploys, manages, controls, and protects Android, iOS, ChromeOS, macOS, or Windows devices. Parameters URL (required): The URL of the Samsung Knox API, for example, https://us01.manage.samsungknox.com Client ID and Client Secret (required): Samsung Knox API client ID and secret. Refer to https://docs.samsungknox.com/admin/knox-manage/manage-api-clients.htm Verify SSL (optional, default is false): Verify...
Salesloft
Last Updated: June 29, 2024Salesloft is a cloud-based sales engagement platform that provides pipeline generation, coaching, customer lifecycle workflows, conversation intelligence, opportunity management, forecasting, and revenue management. Parameters URL (required): The URL of the Salesloft API, for example, https://api.salesloft.com API Token (required): The Salesloft API token Verify SSL (optional, default is false): Verify the SSL certificate or not API Documentation API version V2...
Salesforce ExtremeCloud IQ – Site Engine (XIQ-SE)
Last Updated: July 12, 2024Salesforce ExtremeCloud IQ – Site Engine (XIQ-SE) (formerly XMC Extreme Management Center) is an on-premises management system for Extreme universal hardware, legacy Extreme devices, and third party devices. Parameters Host (required): The hostname or IP address of the Salesforce XIQ-SE server. Port (required): The port of the Salesforce XIQ-SE server, default is 8443. Username and Password (required): Salesforce XIQ-SE...
Salesforce
Last Updated: June 29, 2024Salesforce is cloud-based CRM software that provides a centralized location to store, track, and manage customer information. Salesforce offers a portfolio of products and services. Parameters URL (required): The URL of the Salesforce API. Username and Password (required): Salesforce username and password. User Secret (required): The user secret. Refer to Create a Secure Salesforce API User. Consumer Key (required): The...
Sal Endpoint Management
Last Updated: June 29, 2024What is Sal? Sal Endpoint Management is a multi-tenanted reporting dashboard for Munki. Munki is a set of tools for macOS administrators to manage software installs and removals on macOS client machines. Sal includes search capabilities, application inventory, and support for Munki license tracking. Why Should You Use the Sal Endpoint Management Connector? The Sal...
SailPoint IdentityNow
Last Updated: June 29, 2024What is SailPoint IdentityNow? SailPoint IdentityNow is a SaaS-based IAM (identity and access management) solution that allows you to easily control user access to all systems and applications, enhance audit response and increase your operational efficiency. IdentityNow provides provisioning, single sign-on, password management, and access certification services for mobile, cloud, and on-premises applications. Why Should...
SailPoint IdentityIQ
Last Updated: July 17, 2024SailPoint IdentityIQ is an identity and access management software platform that delivers full lifecycle and compliance management for provisioning, access requests, access certifications, and separation of duties. SailPoint IdentityIQ uses AI Services to deliver only the required access to the right identities and technology at the right time. Parameters URL (required): The URL of the SailPoint...
Sage People
Last Updated: June 29, 2024Sage People is a cloud-based HR platform that provides a portal and manages analytics, talent acquisition, people management, payroll, and attendance and leave. Configuring the Connector for Sage People To configure Lucidum to ingest data from Sage People: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find...
DataLocker SafeConsole
Last Updated: July 13, 2024DataLocker SafeConsole is a central management platform that allows an organization to audit, inventory, and control their manageable encrypted endpoints. Configuring the Connector for SafeConsole To configure Lucidum to ingest data from SafeConsole: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to...
runZero Network Discovery
Last Updated: June 29, 2024What is runZero? runZero Network Discovery (formerly Rumble Network Discovery) provides visibility into your external attack surface and internal networks, revealing potential vulnerabilities, insecure configurations, and other risks before they can be exploited. Why Should You Use the runZero Connector? The runZero connector provides visibility into the assets in your environment. You can use this...
Rubrik
Last Updated: May 14, 2025What is Rubrik Cloud Data Management (CDM)? Rubrik Cloud Data Management (CDM) platform is a data management solution that provides backup, recovery, data archival, and disaster recovery on-premises, at the edge, and in the cloud. Why Should You Use the Rubrik CDM Connector? The Rubrik CDM connector provides visibility into the assets and and policies...
Riverbed SteelCentral Controller
Last Updated: June 29, 2024What is Riverbed SteelCentral Controller? Riverbed SteelCentral Controller (SCC) enables you to manage, configure, and monitor Riverbed products. The SCC also acts as an enterprise management and reporting tool for Riverbed products, enabling greater control for global network deployments. Why Should You Use the Riverbed SteelCentral Controller Connector? The SteelCentral Controller connector provides visibility into...
RiskIQ Illuminate
Last Updated: June 29, 2024RiskIQ Illuminate (formerly RiskIQ Digital Footprint) reveals cyber threats to your critical assets through connected digital relationships. RiskIQ Illuminate provides attack surface intelligence and dynamic risk scoring for you, peers, partners, third parties, industries, and technology dependencies. RiskIQ Illuminate uncovers exposures, risks, and threats against your unique digital footprint. Parameters URL (required): The URL of the...
ReliaQuest GreyMatter Digital Risk Protection (DRP)
Last Updated: February 21, 2025ReliaQuest GreyMatter Digital Risk Protection (DRP) (formerly Digital Shadows) is a risk protection solution that protects against external threats by continually identifying where assets are exposed, providing sufficient context to understand risk, and options for remediation. Configuring the Connector for ReliaQuest GreyMatter Digital Risk Protection (DRP) To configure Lucidum to ingest data from ReliaQuest GreyMatter...
RedSeal
Last Updated: June 29, 2024RedSeal is a platform that analyzes network exposure. RedSeal identifies business assets in a hybrid network that are exposed to risks and delivers the contextual information needed to manage those risks efficiently. Parameters URL (required): The URL of the RedSeal API. Username and Password (required): RedSeal username and password. The user must have a ‘Model Admin’ role....
Red Hat OpenShift
Last Updated: June 29, 2024Red Hat OpenShift is a unified platform to build, modernize, and deploy applications at scale. Red Hat OpenShift provides a complete set of tools and services for bringing apps to market on your choice of infrastructure. Parameters URL (required): The URL of the Red Hat OpenShift API. API Token (required): Red Hat OpenShift API token. Verify SSL (optional, default is...
Red Hat Identity Management (IdM)
Last Updated: July 12, 2024Red Hat Identity Management (IdM) provides a centralized and unified way to manage identity stores, authentication, policies, and authorization policies in a Linux-based domain. Parameters URL (required): The URL of the Red Hat Identity Management API. Username and Password (required): Red Hat Identity Management username and password. Verify SSL (optional, default is false): Verify the SSL certificate or...
Red Hat Ansible Automation Platform
Last Updated: June 29, 2024Red Hat Ansible Automation Platform (formerly Red Hat Ansible Tower) is a platform that provides tools to rapidly implement enterprise-wide automation. Ansible Automation Platform helps teams manage complex, multi-tiered deployments by adding control, knowledge, and delegation to Ansible-powered environments. Parameters URL (required): The URL of the Red Hat Ansible Automation PlatformAPI. Username and Password (required): Red Hat...
Red Canary
Last Updated: June 29, 2024Red Canary provides a security operations platform that monitors for malicious and suspicious behaviors and remediates. The platform includes endpoint and cloud agents and a cloud-hosted collection, detection, and automated response platform. Parameters URL (required): The URL of the Red Canary API. API Key (required): Red Canary API key. Verify SSL (optional, default is false): Verify the SSL...
Rapid7 Nexpose Warehouse
Last Updated: June 29, 2024What is Rapid7 Nexpose Warehouse? Rapid7 Nexpose Warehouse is a dimensional database that stores assessment data and reports from InsightVM in an on-premises PostgreSQL database. Why Should You Use the Rapid7 Nexpose Warehouse Connector? The Rapid7 Nexpose Warehouse connector provides visibility into assets and vulnerability information in your environment. You can use this visibility to:...
Rapid7 InsightVM
Last Updated: September 12, 2025Rapid7 InsightVM provides visibility and risk prioritization for vulnerabilities found in local, remote, cloud, containerized, and virtual infrastructure. This connector is for the on-premises version of Rapid7 InsightVM, that uses version 3 of the InsightVM API. Requirements To use the Rapid7 Connector in Lucidum: Before configuring the Rapid7 connector in Lucidum, you must create a read-only...
Rapid7 InsightVM (Cloud)
Last Updated: July 8, 2024What is Rapid7 InsightVM? Rapid7 InsightVM Cloud is a vulnerability management solution, providing discovery, detection, verification, risk classification, impact analysis, reporting and mitigation. Lucidum uses the InsightVM Cloud Integrations API V4. Why Should You Use the Rapid7 InsightVM Connector? The Rapid7 InsightVM connector provides visibility into devices and users in your environment. You can use...
Rapid7 InsightIDR
Last Updated: June 29, 2024What is Rapid7 InsightIDR? Rapid7 InsightIDR provides a single platform for incident detection and response, authentication monitoring, and endpoint visibility. InsightIDR identifies unauthorized access from external and internal threats and highlights suspicious activity from different data streams. Why Should You Use the Rapid7 InsightIDR Connector? The Rapid7 InsightIDR connector provides visibility into devices and users...
Rapid7 InsightCloudSec
Last Updated: June 29, 2024What is Rapid7 InsightCloudSec? Rapid7 InsightCloudSec is a fully-integrated cloud-native security platform CNAPP (Cloud Native Application Protection Platform). InsightCloudSec provides continuous security and compliance of your cloud environment with a fully-integrated cloud-native security solution. Why Should You Use the Rapid7 InsightCloudSec Connector? The Rapid7 InsightCloudSec connector provides visibility into devices and applications in your environment....
Rapid7 InsightAppSec
Last Updated: July 17, 2024What is Rapid7 InsightAppSec? Rapid7 InsightAppSec provides Dynamic Application Security Testing (DAST) solution for applications. InsightAppSec “attacks” different aspects of your applications to identify response behaviors that make your applications vulnerable to attackers. The attacks are run during scans, which you can customize and schedule based on your needs. Why Should You Use the Rapid7...
Rancher
Last Updated: June 29, 2024Rancher is a complete software stack for teams adopting containers. It addresses the operational and security challenges of managing multiple Kubernetes clusters across any infrastructure, while providing DevOps teams with integrated tools for running containerized workloads. Configuring the Connector for Rancher To configure Lucidum to ingest data from Rancher: Log in to Lucidum. In the...
Quip
Last Updated: October 23, 2025What is Quip? Quip is a collaboration and productivity solution that embeds collaborative documents, spreadsheets, and chat inside Salesforce records. comprehensive cloud authentication authority. Why Should You Use the Quip Connector? The Quip connector provides visibility into the users and assets in your enviornment. You can use this visibility to: ensure users are managed per...
Quest KACE Endpoint Systems Management Appliance
Last Updated: June 29, 2024The Quest KACE Endpoint Systems Management Appliance (SMA) provides comprehensive management of network-connected devices, including servers, PCs, Macs, Chromebooks, tablets, printers, storage, networking gear and the Internet of Things (IoT). The Quest KACE Endpoint Systems Management Appliance (SMA) provides services for initial deployment, management, security, and retirement of network connected device. Configuring the Connector for...
Qualys Global AssetView
Last Updated: March 21, 2025What is Qualys Global AssetView? Qualys Global AssetView (formerly Qualys Global IT) uses a combination of Qualys sensors (agents, scanners, and passive network sensors) to discover assets in your environment and collect inventory information. Why Should You Use the Qualys Global AssetView Connector? The Qualys Global AssetView connector provides visibility into all the assets in...
Qualys Cloud Platform (VM/PC)
Last Updated: July 12, 2024The Qualys Cloud Platform (VM/PC) continuously identifies threats and monitors unexpected changes in the network before they turn into breaches. Creating an API Key for Qualys Before configuring the Qualys connector in Lucidum, you must first create a user with API access. Lucidum will use this user account to access Qualys. To create a new...
Pure Storage Pure1
Last Updated: June 29, 2024Pure1 is a cloud-based, data-management platform that manages Pure storage arrays. Pure1 delivers a single AI-driven hub automated with the Pure1 Meta virtual assistant. Pure1 Meta gathers analytics and provides full-stack analysis, alerting, and reports. Parameters URL (required): The URL of the Pure Storage Pure1 API Application ID (required): Pure Storage Pure1 API application ID Private Key...
Puppet
Last Updated: June 29, 2024Puppet is an open-source tool that helps you manage and automate the configuration of servers. All of the data generated by Puppet (for example facts, catalogs, reports) is stored in PuppetDB. Creating a Certificate in Puppet Before configuring the Puppet connector in Lucidum, you must first create a certificate. Lucidum will use the certificate to...
Pulumi
Last Updated: June 29, 2024Pulumi Cloud Engineering is an infrastructure as code platform that uses familiar programming languages and tools to build, deploy, and manage cloud applications and cloud infrastructure. Pulumi is free, open source, and optionally pairs with the Pulumi Cloud. Parameters URL (required): The URL of the Pulumi API. API Token (required): Pulumi API token. .Verify SSL (optional, default is...
Pulseway Remote Monitoring and Management (RMM)
Last Updated: July 13, 2024Pulseway Remote Monitoring and Management (RMM) is a remote monitoring and management solution that provides monitoring and alerting, patch management, remote control, and scripting and automation. Parameters Host (required): The hostname or IP address of the Pulseway server, for example, api.pulseway.com Username and Password (required): Pulseway username and password Verify SSL (optional, default is false): Verify the SSL certificate...
PRTG Network Monitor
Last Updated: June 29, 2024What is PRTG Network Monitor? PRTG Network Monitor is a network monitoring application for Windows-based systems. PRTG Network Monitor is suitable for networks of all sizes and capable of monitoring LANs, WANs, WLANs, and VPNs. PRTG Network Monitor also monitors physical or virtual web, mail, and file servers, Linux systems, Windows clients, and routers. Why...
Proxmox Virtual Environment (VE)
Last Updated: July 12, 2024Proxmox Virtual Environment (VE) is an open source, server virtualization management solution based on QEMU/KVM and LXC. Promox VE manages virtual machines, containers, highly available clusters, storage, and networks. Parameters Host (required): The hostname or IP address of the Proxmox Virtual Environment server Port (required): The port of the Proxmox Virtual Environment server, default is 443 Username...
Proofpoint Zero Trust Network Access (ZTNA)
Last Updated: July 17, 2024Proofpoint Zero Trust Network Access (ZTNA) is a people-centric, zero-trust alternative to VPN. ZTNA secures remote access to any enterprise application, regardless of location. Parameters URL (required): The URL of the Proofpoint ZTNA API, for example, https://api.metanetworks.com. Client ID and Client Secret (required): Proofpoint ZTNA API client ID and secret. Verify SSL (optional, default is false): Verify the SSL...
Proofpoint Targeted Attack Protection (TAP)
Last Updated: July 12, 2024Proofpoint Targeted Attack Protection (TAP) provides an innovative approach to detect, analyze, and block advanced email threats. TAP detects and blocks polymorphic malware, weaponized documents, credential phishing, and other advanced threats. TAP monitors cloud app activity to identify suspicious logins, broad file sharing, and risky third-party applications. Parameters Host (required): The hostname or IP address of...
Proofpoint Insider Threat Management
Last Updated: June 29, 2024Proofpoint Insider Threat Management (formerly ObserveIT) is a SaaS-based Insider Threat Management solution that protects sensitive data from insider threats and data loss at the endpoint. Proofpoint ITM combines context across content, behavior, and threats to provide you with deep visibility into user activities and to mitigate business disruption and data loss. Configuring the Connector...
Proofpoint Identity Threat Defense
Last Updated: June 29, 2024Proofpoint Identity Threat Defense (formerly Illusive Networks) is an Identity Threat Detection and Response (ITDR) solution. Proofpoint Shadow uses modern deception technology to detect attackers as they attempt to move laterally and escalate their privilege. Proofpoint Spotlight ontinuously discovers and remediates identity threats to stop lateral movement. Configuring the Connector for Proofpoint Identity Threat Defense...
Promisec
Last Updated: June 26, 2024Promisec Endpoint Manager (PEM) is an agentless endpoint security solution that inspects the entire enterprise and identifies, analyzes, and remediates security gaps. PEM provides endpoint security, compliance, and vulnerability management. Parameters Host (required): The hostname or IP address of the Microsoft SQL Server used by the Promisec Endpoint Manager instance. Port (required): The port of the Microsoft...
PrivX
Last Updated: July 17, 2024PrivX is a scalable, automated, privileged access management (PAM) solution for hybrid and multi-cloud environments, quantum-safe connections, and any combination of password vaulting, rotation, and passwordless authentication. Parameters URL (required): The URL of the PrivX API. Client ID and Client Secret (required): PrivX API client ID and secret. API Documentation https://privx.docs.ssh.com/api
Portnox Cloud
Last Updated: June 29, 2024Portnox Cloud (formerly Portnox CLEAR) is a cloud-native platform for unified access control. Portnox Cloud provides passwordless authentication, zero trust access control, risk mitigation, and compliance enforcement for networks, applications, and infrastructures. Parameters Host (required): The hostname or IP address of the Portnox Cloud server, for example, Cloud.portnox.com. Port (required): The port of the Portnox Cloud server, default...
PluralSight
Last Updated: June 29, 2024PluralSight is an end-to-end tech workforce development solution that provides skills assessments, training courses, and training analytics. Parameters URL (required): The URL of the PluralSight API API Key (required): PluralSight API key Verify SSL (optional, default is false): Verify the SSL certificate or not API Documentation https://developer.pluralsight.com/schema/user/users
PK Protect Data Protection Platform
Last Updated: June 29, 2024PK Protect Data Protection Platform (formerly PKWARE) is an end-to-end solution that supports your data security posture by detecting and protecting sensitive data across the enterprise. Parameters URL (required): The URL of the PK Protect Data Protection Platform API. API Token (required): PK Protect Data Protection Platform API token. Verify SSL (optional, default is false): Verify the SSL...
PingOne
Last Updated: March 12, 2026What is PingOne? PingOne Directory provides a cloud-based directory service for secure identity access management. Why Should You Use the PingOne Connector? The PingOne connector provides visibility into the applications, assets, and users in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between assets, users,...
PingID
Last Updated: November 25, 2025What is PingID ? PingID is a cloud-based, adaptive multi-factor authentication (MFA) solution that is part of PingOne for Workforce, a comprehensive cloud authentication authority. Why Should You Use the PingID Connector? The PingID connector provides visibility into the assets and users in your enviornment. You can use this visibility to: ensure assets are managed...
phpIPAM
Last Updated: June 29, 2024phpIPAM is an open-source, IP address management application (IPAM). phpIPAM is a php-based application with MySQL database backend, using jQuery libraries, ajax and HTML5/CSS3 features. Parameters URL (required): The URL of the phpIPAM API Application ID (required): The application ID Username and Password (required): phpIPAM username and password. The user must have rwa permissions. Verify SSL (optional, default is...
Parallels
Last Updated: June 29, 2024Parallels enables you to add Windows, Linux, or another operating system to your Mac by creating a virtual machine (VM) inside your Mac. You can then install Windows or another OS on the virtual machine, just as you would on a physical computer. Parameters Host (required): The hostname or IP address of the Parallels Server Port (required):...
PaperCut
Last Updated: June 29, 2024PaperCut NG/MF is a comprehensive print management system that monitors and controls print resources and provides administrative and user tools that can be accessed through a web browser. Parameters URL (required): The URL of the PaperCut API. API Token (required): PaperCut API token. Verify SSL (optional, default is false): Verify the SSL certificate or not.
Panorays
Last Updated: June 29, 2024Panorays is a SaaS-based platform that evaluates and manages third-party security and mitigates and remediates risk, reduces data breaches, ensures vendor compliance, and improves cybersecurity posture. Parameters URL (required): The URL of the Panorays API, for example, https://api.panoraysapp.com API Token (required): Panorays API token Verify SSL (optional, default is false): Verify the SSL certificate or not
Palo Alto Networks Prisma Cloud CWP
Last Updated: July 12, 2024What is Prisma Cloud CWP? Palo Alto Prisma Cloud CWP (cloud workload protection) provides protection across hosts, containers, and serverless functions in the applications lifecycle. Prisma Cloud is available in both self-hosted and SaaS versions. Why Should You Use the Prisma Cloud CWP Connector? The Prisma Cloud CWP connector provides visibility into the workload on...
Palo Alto Networks Panorama
Last Updated: March 28, 2025What is Panorama? Palo Alto Panorama monitors, configures, and automates management of multiple Palo Alto firewalls. Panorama manages network security with a single security rule base for firewalls that includes configuration management, threat prevention, URL filtering, application awareness, user identification, sandboxing, file blocking, access control, and data filtering. Why Should You Use the Panorama Connector?...
Palo Alto Networks Prisma Cloud CSPM
Last Updated: June 29, 2024What is Prisma Cloud CSPM? Palo Alto Networks Prisma Cloud CSPM is a cloud security posture management (CSPM) tool. Prisma Cloud provides visibility and threat detection to mitigate risks and secure your workloads in a heterogenous environment (hybrid and multi-cloud). Prisma Cloud also enforces compliance and secures data. Why Should You Use the Prisma Cloud...
Palo Alto Networks Prisma Cloud Compute Edition
Last Updated: June 29, 2024Palo Alto Networks Prisma Cloud Compute Edition (formerly Twistlock) is a cloud-native, cloud workload protection platform (CWPP). Prisma Cloud Compute Edition provides protection across hosts, containers, and serverless deployments in any cloud, throughout the software lifecycle. In addition, Prisma Cloud Compute Edition provides Web Application and API Security (WAAS). Parameters URL (required): The URL of the...
Palo Alto Networks PAN‑OS
Last Updated: July 12, 2024Palo Alto Networks PAN‑OS is the software that runs all Palo Alto Networks next-generation firewalls. PAN‑OS provides complete visibility and control of the applications in use across all users and devices in all locations. Parameters URL (required): The URL of the PAN-OS firewall Username and Password (required): PAN-OS administrative username and password Proxy (optional): Optional proxy to use...
Palo Alto Networks IoT Security
Last Updated: June 29, 2024Palo Alto Networks IoT Security uses AI and machine learning to discover and identify all network-connected devices and construct a data-rich, dynamic inventory. IoT Security then continuously detects device vulnerabilities and anomalous behavior and notifies administrators. Parameters URL (required): The URL of the Palo Alto Networks IoT Security API, for example, https://<customer>.iot.paloaltonetworks.com Customer ID (required): The customer...
Palo Alto Networks Cortex Xpanse
Last Updated: September 12, 2024What Is Palo Alto Networks Cortex Xpanse? Palo Alto Networks Cortex Xpanse is a SaaS-based, agentless attack surface management (ASM) platform that collects and correlates active and passive information about all devices and services connected to the public Internet. Cortex Xpanse then aligns assets to organizations and identifies weaknesses in infrastructure. Why Should You Use...
Palo Alto Networks Cortex XDR
Last Updated: July 12, 2024What is Palo Alto Cortext XDR? Palo Alto Cortex XDR is an extended detection and response (XDR) platform that that integrates data from multiple sources, including networks, cloud environments, applications, and endpoints. This allows for more effective threat hunting, faster incident response times, and improved overall security posture. Why Should You Use the Palo Alto...
PagerDuty
Last Updated: June 29, 2024What is PagerDuty? PagerDuty is a cloud-based service for incident response. Why Should You Use the PagerDuty Connector? The PagerDuty connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between assets, users, applications, and data How Does This Connector...
PacketFence
Last Updated: June 29, 2024PacketFence is a free, open source network access control (NAC) solution that includes a captive-portal for registration and remediation, centralized wired, wireless, and VPN management, industry-leading BYOD capabilities, 802.1X and RBAC support, and integrated network anomaly detection with layer-2 isolation of problematic devices. Configuring the Connector for PacketFence To configure Lucidum to ingest data from...
oVirt
Last Updated: June 29, 2024oVirt is an open-source, distributed virtualization solution, designed to manage enterprise infrastructure. oVirt uses the KVM hypervisor and several other community projects, including libvirt, Gluster, PatternFly, and Ansible. Parameters Host (required): The hostname or IP address of the oVirt server Port (required): The port of the oVirt server, default is 9090 Username and Password (required): oVirt username and...
Outpost24 Sweepatic EASM
Last Updated: June 29, 2024Outpost24 Sweepatic EASM (formerly Sweepatic) is a cloud-based External Attack Surface Management that maps your growing attack surface. Sweepatic EASM includes automatic data gathering, enrichment, and AI-driven analysis modules and simple, effective remediation actions. Parameters Host (required): The hostname or IP address of the Sweepatic EASMserver API Key (required): Sweepatic EASM API key Verify SSL (optional, default is...
Orca Cloud Visibility Platform
Last Updated: July 17, 2024What is Orca Cloud Visibility Platform? Orca Cloud Visibility Platform delivers visibility of cloud security posture, including prioritized alerts on vulnerabilities, compromises, misconfigurations, and more. Why Should You Use the Orca Connector? The Oca connector provides visibility into the cloud assets in your environment. You can use this visibility to: ensure assets are managed per...
Oracle Communications Unified Assurance (OCUA)
Last Updated: July 12, 2024Oracle Communications Unified Assurance (OCUA) (formerly Federos OCUA) manages services on a single platform to ensure availability of communications, information, and product offerings. Unified Assurance provides fault, performance, topology and service level management in a single scalable software platform. Configuring the Connector for OCUA To configure Lucidum to ingest data from OCUA: Log in to...
Oracle Cloud Infrastructure
Last Updated: June 29, 2024What is Oracle Cloud Infrastructure (OCI)? Oracle Cloud Infrastructure (OCI) is a set of complementary cloud services that enable you to build and run a range of applications and services in a highly available hosted environment. OCI provides high-performance compute capabilities (as physical hardware instances) and storage capacity in a flexible overlay virtual network that...
OPSWAT MetaDefender IT Access
Last Updated: June 29, 2024OPSWAT MetaDefender IT Access (formerly OPSWAT MetaAccess) is an integrated platform that provides secure access for remote and on-prem users and ensures endpoint compliance for managed, BYOD and IoT devices. Parameters URL (required): The URL of the OPSWAT MetaDefender IT Access API, for example, https://gears.opswat.com Client Key and Client Secret (required): OPSWAT MetaDefender IT Access API client key...
Opsview
Last Updated: June 29, 2024Opsview is a platform for monitoring cloud, network, and infrastructure. Opsview is available as SaaS or on-premises. Parameters URL (required): The URL of the Opsview API Username and Password (required): Opsview username and password Verify SSL (optional, default is false): Verify the SSL certificate or not API Documentation https://knowledge.opsview.com/reference/api-intro#api-intro
OpsRamp
Last Updated: June 29, 2024OpsRamp platform is a scalable, SaaS-based, IT Operations Management (ITOM) application for on-premises and cloud infrastructures that enables resource monitoring and management across business units and locations. In addition, OpsRamp platform monitors for alert conditions and automates alert escalation and remediation. Parameters URL (required): The URL of the OpsRamp API, for example, https://api.opsramp.com Tenant ID (required): The tenant...
Opsgenie
Last Updated: June 29, 2024Opsgenie is an incident management platform. Opsgenie receives alerts from monitoring systems and custom applications, categorizes and prioritizes each alert, notifies staff via multiple communication channels, and automatically escalates if necessary. Parameters URL (required): The URL of the Opsgenie API API Key (required): Opsgenie API key. To get an API key, see Opsgenie API Key Management. Data Lookback...
OpenText Webroot Business Endpoint Protection
Last Updated: June 29, 2024OpenText Webroot Business Endpoint Protection (formerly Webroot Endpoint Protection) delivers real-time behavior, core system, web threat, identity, phishing, evasion, and offline shields for detection, prevention and protection from complex attacks. OpenText Webroot Business Endpoint Protection detects, blocks and remediates (quarantines) evasive script attacks, malicious behaviors in PowerShell, JavaScript and VBScript, and exploits and advanced persistent...
OpenText SiteScope
Last Updated: June 29, 2024OpenText SiteScope monitors key performance measurements and report topology on a wide range of back-end infrastructure components. The monitors are individually configured to automatically test performance and availability of systems and services in the network environment. Parameters Host (required): The hostname or IP address of the OpenText SiteScope server Username and Password (required): OpenText SiteScope username and...
OpenText Server Automation
Last Updated: June 29, 2024OpenText Server Automation (SA) is an enterprise class software that provides data center automation and support services. SA automates data center processes associated with the deployment, support, and growth of your server and server application infrastructure. SA supports cross-platform environments and is designed to automate both new and existing data center environments. Parameters Host (required): The...
OpenText Network Node Manager i
Last Updated: June 29, 2024What is OpenText Network Node Manager i? OpenText™ Network Node Manager i (NNMi) is an enterprise-class network management solution that provides performance monitoring, topology mapping, and automation to help organizations reduce downtime and improve network performance. Why Should You Use the Network Node Manager i (NNMi)? The Network Node Manager i (NNMi) connector provides visibility into...
OpenText NetIQ Identity Manager
Last Updated: June 29, 2024OpenText NetIQ Identity Manager (formerly NetIQ Identity Manager) is an identity management product that manages identity and access across physical, virtual, and cloud environments. NetIQ Identity Manager synchronizes identity data across connected systems, ensures that users have access only to the required resources, provisions or deprovisions user access based on roles, and provides compliance with...
OpenText NetIQ Advanced Authentication
Last Updated: June 29, 2024OpenText NetIQ Advanced Authentication (formerly NetIQ Advanced Authentication) is a multi-factor authentication solution that protects IT infrastructure and sensitive data. Advanced Authentication supports fingerprint and card readers and one-time passwords (OTP). Parameters Host (required): The hostname or IP address of the OpenText NetIQ Advanced Authentication server Username and Password (required): OpenText NetIQ Advanced Authentication username and password...
OpenText GroupWise
Last Updated: June 29, 2024OpenText GroupWise (formerly Micro Focus GroupWise) is an enterprise collaboration system that provides secure email, calendaring, scheduling, task management, contact management, and document management. Parameters Host (required): The hostname or IP address of the OpenText GroupWise server Port (required): The port of the OpenText GroupWise server, default is 9710 Username and Password (required): OpenText GroupWise username and password...
OpenStack
Last Updated: June 29, 2024OpenStack is a cloud operating system that controls large pools of compute, storage, and networking resources throughout a datacenter, all managed through a centralized dashboard. Parameters URL (required): The URL of the OpenStack API Username and Password (required): OpenStack username and password Verify SSL (optional, default is false): Verify the SSL certificate or not API Documentation https://docs.openstack.org/api-quick-start/api-quick-start.html#authentication-and-api-request-workflow
OpenLDAP
Last Updated: July 9, 2024OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol. The OpenLDAP Software suite includes a stand-alone LDAP load balancer daemon, a stand-alone LDAP server daemon, libraries, utilities, and tools. A role-based identity access management tool is also available. Parameters Host (required): The hostname or IP address of the OpenLDAP server. Port (required): The...
openDCIM
Last Updated: June 29, 2024What is openDCIM? openDCIM is an open-source Data Center Infrastructure Management solution that provides asset tracking, monitoring of space, power, and cooling, and contact management. Why Should You Use the openDCIM Connector? The openDCIM connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your...
Oomnitza
Last Updated: July 17, 2024Oomnitza Enterprise Technology Management is a SaaS-based, agentless platform that provides inventory controls, technology lifecycle management, and workflow automation across your technology environment and management tools. Parameters URL (required): The URL of the Oomnitza Enterprise Technology API. API Token (required): Oomnitza Enterprise Technology API token. API Documentation API version V3 https://oomnitza.zendesk.com/hc/en-us/articles/17200339347991-Oomnitza-REST-APIs
OneLogin
Last Updated: June 29, 2024What is OneLogin? OneLogin is an Identity and Access Management Solution (IAM) that secures and centralizes applications, devices, data, and end-users in both on-premises and cloud environments. Why Should You Use the OneLogin Connector? The OneLogin connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed...
OnDMARC
Last Updated: June 29, 2024OnDMARC is an email security product that configures and maintains a secure DMARC policy. OnDMARC provides cloud-based DMARC, DKIM and SPF configuration and management. Parameters URL (required): The URL of the OnDMARC API, for example, https://api.ondmarc.com API Key (required): OnDMARC API key. The API key must have super-user permissions Verify SSL (optional, default is false): Verify the SSL...
Omnissa Horizon 8
Last Updated: July 17, 2024Omnissa Horizon 8 (formerly VMware Horizon) delivers virtual desktops and applications in a vSphere-based environment, whether deployed on-premises or in public clouds. Omnissa Horizon Cloud Service (formerly VMware Horizon Cloud Service) is a desktop-as-a-service (DaaS) platform that delivers virtual desktops and applications in a native cloud environment. Parameters Host (required): The hostname or IP address of...
Okta LDAP
Last Updated: August 1, 2024What is Okta LDAP? Okta LDAP allows cloud based LDAP authentication against Universal Directory instead of an on-prem LDAP server, including Active Directory. Why Should You Use the Okta LDAP Connector? The Okta LDAP connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your...
Okta SSO
Last Updated: September 12, 2025Okta is a secure identity cloud that links all your apps, logins and devices into a unified digital fabric. Requirements To use the Okta Connector in Lucidum: Before configuring the Okta connector in Lucidum, you must create a service account and generate an API key in Okta. You can then configure the Okta connector in Lucidum and start...
Obsidian Security
Last Updated: July 17, 2024Obsidian Security is a SaaS Security Posture Management (SSPM) solution that continuously monitors risk and uncovers shadow SaaS applications. Obsidian Security consolidates and analyzes data from within and across your applications, creating context around users, permissions, configurations, and activities. Obsidian Security then identifies opportunities to reduce unnecessary privileges and harden configurations. Configuring the Connector for...
Observium
Last Updated: June 29, 2024Observium is a network monitoring and management platform that provides real-time insight into network health and performance. Observium automatically discovers network devices and services, collects performance metrics, and generates alerts when problems are detected. Configuring the Connector for Observium To configure Lucidum to ingest data from Observium: Log in to Lucidum. In the left pane,...
Nutanix AHV
Last Updated: June 29, 2024Nutanix AHV is a hypervisor and virtualization platform that powers VMs and containers for applications and cloud-native workloads on-premises and in public clouds. AHV comes preinstalled on Nutanix appliances and simplifies deploying, managing, scaling, and supporting VM infrastructure. Parameters Host (required): The hostname or IP address of the Nutanix AHV server Port (required): The port of the...
Nucleus
Last Updated: June 29, 2024Nucleus is a Risk Based Vulnerability Management (RBVM) solution that automates vulnerability management processes and workflows, enabling organizations to mitigate vulnerabilities faster and easier. Parameters Host (required): The hostname or IP address of the Nucleus Security server API Key (required): Nucleus Security API key Verify SSL (optional, default is false): Verify the SSL certificate or not API Documentation...
Nozomi Guardian
Last Updated: June 29, 2024Nozomi Guardian automates asset discovery, inventory, administration, and risk management for OT and IoT environments. Nozomi Central Management Console (CMC) provides centralized monitoring of all Guardian sensors. Parameters Host (required): The hostname or IP address of the Nozomi Guardian server Username and Password (required): Nozomi Guardian username and password Verify SSL (optional, default is false): Verify the SSL...
NinjaOne
Last Updated: June 29, 2024What is NinjaOne? NinjaOne (formerly NinjaRMM) allows IT teams to monitor and manage endpoints via a lightweight agent application on the device. The agent transmits data from the device back to NinjaOne for analysis and from NinjaOne to the device for execution. NinjaOne allows for manual customization as well as scripting and automation. Why Should...
Nexthink Infinity
Last Updated: June 29, 2024Nexthink Infinity is an automation and remediation platform that delivers visibility across all environments so IT teams can continuously see, diagnose, and fix digital workplace issues. Parameters Host (required): The hostname or IP address of the Nexthink server Port (required): The port of the Nexthink server, default is 1671 Username and Password (required): Nexthink username and password Verify...
New Relic
Last Updated: June 29, 2024What is New Relic? New Relic provides cloud-based software to monitor application performance, track user interactions, and monitor the performance of servers, instances, and services. Why Should You Use the New Relic Connector? The New Relic connector provides visibility into the applications, assets, and users in your environment. You can use this visibility to: ensure...
Netwrix Privilege Secure
Last Updated: June 29, 2024Netwrix Privilege Secure (formerly Remediant SecureONE) is a privileged access manager (PAM) that creates ephemeral identities for privileged access. Replacing standing privileges with on-demand accounts and just-in-time access reduces the attack surface and enhances overall security. Parameters URL (required): The URL of the Netwrix Privilege Secure API User ID (required): Netwrix Privilege Secure user ID. User ID...
NetSpyGlass
Last Updated: June 29, 2024NetSpyGlass is an integrated network mapping and monitoring system for the multi-vendor datacenter and WAN networks that is highly automated and fully scriptable, scales to thousands of devices and millions of metrics, and supports data analytics with embedded programming language (Python). Parameters Host (required): The hostname or IP address of the NetSpyglass server API Key (required): NetSpyglass...
Netskope
Last Updated: April 21, 2026What is Netskope Security Cloud? Netskope Security Cloud platform provides threat protection for cloud services, websites, and private applications. Why Should You Use the Netskope Connector? The Netskope Security Cloud connector provides visibility into the public and private clouds in your environment. You can use this visibility to: ensure cloud assets are managed per your...
Netdisco
Last Updated: July 17, 2024Netdisco is a web-based network management tool suitable for small to very large networks. Netdisco includes a lightweight web server for the interface, a backend daemon to gather data from your network, and a command line interface for troubleshooting. Parameters Host (required): The hostname or IP address of the Netdisco server, for example, netdisco.internal.acme.com. Port (required): The...
NetBrain
Last Updated: June 29, 2024NetBrain Integrated Edition is an adaptive automation platform that integrates with existing NMS tools and IT workflows to automate documentation, troubleshooting, network change, and defense. Parameters URL (required): The URL of the NetBrain API. Domain ID (required): The domain ID. Tenant ID (required): The tenant ID. Username and Password (required): NetBrain username and password. Verify SSL (optional, default is false):...
NetBox
Last Updated: July 17, 2024What is NetBox? NetBox is an application that models and documents modern networks. The application includes IP address management (IPAM), datacenter infrastructure management (DCIM), and APIs and extensions. Why Should You Use the NetBox Connector? The NetBox connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are...
NetApp ONTAP
Last Updated: June 29, 2024NetApp ONTAP data management software offers unified storage for applications that read and write data over block-access or file-access protocols, in storage configurations that range from high-speed flash, to lower-priced spinning media, to cloud-based object storage. NetApp ONTAP implementations run on NetApp platforms and in private, public, or hybrid clouds. Parameters URL (required): The URL of...
Nectus
Last Updated: June 29, 2024Nectus is a network monitoring tool that performs discovery, monitors networks, servers, and databases, provides a syslog server, provides IP Address Management, performs automated configuration backups, and generates network topology visualizations. Parameters URL (required): The URL of the Nectus API Client ID and Client Secret (required): Nectus API client ID and secret Verify SSL (optional, default is false):...
Nasuni
Last Updated: June 29, 2024The Nasuni File Data Platform is a cloud-native replacement for traditional network-attached storage (NAS) and file server infrastructure. Nasuni consolidates file data in expandable, highly-durable object storage such as Amazon S3, Azure Blob, and Google Cloud object storage. The Nasuni File Data Platform delivers scalability, built-in security, and fast edge performance within a single, unified...
Nagios XI
Last Updated: June 29, 2024What is Nagios XI? Nagios XI is a network monitoring platform that provides discovery, monitoring, alerting, graphing, and reporting for your entire infrastructure, including servers, operating systems, applications, network devices, websites, hypervisors, cloud servers, and much more. Nagios XI includes a UI that makes configuration quicker and easier. Why Should You Use the Nagios XI...
Nagios Core
Last Updated: June 29, 2024Nagios Core is the monitoring and alerting engine around which hundreds of Nagios projects are built. Nagios Core serves as the event scheduler, event processor, and alert manager for elements that are monitored. Configuring the Connector for Nagios Core To configure Lucidum to ingest data from Nagios Core: Log in to Lucidum. In the left...
N-able
Last Updated: June 29, 2024N-able N-sight Remote Monitoring and Management (N-sight RMM) provides real-time monitoring and management of devices. N-sight RMM supports network devices such as printers, routers, and firewalls on Windows, macOS, and Linux. Configuring the Connector for N-able To configure Lucidum to ingest data from N-able: Log in to Lucidum. In the left pane, click Connector. In the Connector page,...
Mosyle
Last Updated: July 17, 2024What is Mosyle? Mosyle is an MDM, Endpoint Security, Internet Privacy & Security, Identity Management, and Application Management solution for Apple products.s. Why Should You Use the Mosyle Connector? The Mosyle connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies find...
Monday.com
Last Updated: July 17, 2024Monday.com is a cloud-based, customizable workOS for building processes, creating projects, and completing day-to-day work. monday.com enables teams and organizations to develop tailored solutions to manage their workflows through various methods, including monday apps. Configuring the Connector for Monday To configure Lucidum to ingest data from Monday: Log in to Lucidum. In the left pane,...
Microsoft System Center Virtual Machine Manager (SCVMM)
Last Updated: July 12, 2024Microsoft System Center Virtual Machine Manager (SCVMM) provides a unified management experience across on-premises, service provider, and the Azure cloud. With VMM, you can configure and manage your datacenter components as a single fabric. VMM provisions and manages the resources needed to create and deploy virtual machines and services to private clouds, add network resources...
Microsoft SharePoint
Last Updated: July 17, 2024What is Microsoft SharePoint? SharePoint is included in Microsoft 365. SharePoint allows teams to easily build team sites and share files, data, news, and resources across PCs, Macs, and mobile devices. Why Should You Use the Microsoft SharePoint Connector? The Microsoft SharePoint connector provides visibility into SharePoint activity such as creating files, accessing files, downloads,...
Microsoft Sentinel
Last Updated: September 12, 2025What is Microsoft Sentinel? Microsoft Sentinel is a cloud-native security information and event management (SIEM) platform that uses built-in AI to help analyze large volumes of data across an enterprise. Why Should You Use the Microsoft Sentinel Connector? The Microsoft Sentinel connector provides visibility into the logs, alerts, and incidents managed by Microsoft Sentinel. You...
Microsoft Lync
Last Updated: July 9, 2024Microsoft Lync provides instant messaging (IM), audio and video calls, Skype for Business Meetings, availability (presence) information, and sharing capabilities all from one, easy-to-use program. Parameters URL (required): The URL of the Microsoft Lync API Username(required): Microsoft Lync username and password. Password (required): Microsoft Lync username and password.
Microsoft Intune
Last Updated: January 9, 2026Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Lucidum uses the Intune connector to ingest data from Microsoft Intune. Requirements To use the Intune Connector in Lucidum: Before configuring the Microsoft Intune connector in Lucidum, you must first define a client in Azure. Lucidum will use...
Microsoft Defender
Last Updated: March 9, 2026What is Microsoft Defender? Microsoft Defender (formerly Microsoft Defender Advanced Threat Protection (ATP)) is an enterprise endpoint security platform that helps defend against advanced persistent threats. Why Should You use the Microsoft Defender Connector? The Microsoft Defender connector provides visibility into the software and hardware in your environment. You can use this visibility to: monitor...
Microsoft Configuration Manager
Last Updated: June 1, 2026What is Microsoft Configuration Manager? Microsoft Configuration Manager (formerly Microsoft SCCM and Microsoft Endpoint Configuration Manager) is a systems management software product for managing large groups of computers running Windows NT, Windows Embedded, macOS (OS X), Linux or UNIX, as well as Windows Phone, Symbian, iOS, and Android mobile operating systems. Why Should You Use...
Microsoft Azure
Last Updated: June 5, 2026What is Microsoft Azure? Microsoft Azure is a cloud computing service created by Microsoft for building, testing, deploying, and managing applications and services through a global network of Microsoft-managed data. Why Should You use the Microsoft Azure Connector? Lucidum uses the Microsoft Azure connector to retrieve data from Microsoft Azure virtual machines and Azure services,...
Microsoft Active Directory
Last Updated: January 7, 2026Microsoft Active Directory (AD) provide a single point of control for managing users, computers, groups, and other resources on a network. Active Directory uses a structured data store as the basis for a logical, hierarchical organization of directory information The Lucidum connector ingests the following types of assets: Computers Users Configuring the Connector for Microsoft...
BlueCat Micetro DNS Management
Last Updated: July 13, 2024BlueCat Micetro DNS Management is a DDI solution that orchestrates DNS, DHCP, and IPAM Configuring the Connector for BlueCat Micetro DNS Management To configure Lucidum to ingest data from BlueCat Micetro DNS Management : Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want...
Medigate
Last Updated: June 29, 2024Medigate is a modular, SaaS-powered healthcare cybersecurity platform that scales to protect your environment, address your use cases, and fulfill your goals as they evolve. Medigate allows you to discover, view, secure, and manage all the devices connected to your network and turn the associated data into a powerful resource. Configuring the Connector for Medigate...
McAfee MVision Cloud
Last Updated: July 17, 2024McAfee MVision Cloud is a Cloud Access Security Broker (CASB) solution that protects data and stops threats in the cloud across SaaS, PaaS, and IaaS, and on-premises environments from a single, cloud-native enforcement point. MVision helps you build and apply policies, manage incidents, manage responses, and provides a registry of cloud services based on a...
ManageEngine ServiceDesk Plus
Last Updated: September 12, 2025ManageEngine ServiceDesk Plus (MESDP) is a comprehensive help desk and asset management software that provides help desk agents and IT managers an integrated console to monitor and maintain the assets and IT requests generated from the users of the IT resources in an organization. Creating Tokens for ManageEngine ServiceDesk Plus Before configuring the ManageEngine ServiceDesk...
ManageEngine OpUtils
Last Updated: June 29, 2024ManageEngine OpUtils is an IP address and switch port management software that monitors, diagnoses, and troubleshoots IT resources. OPUtils helps network engineers manage their switches and IP address space. Parameters Host (required): The hostname or IP address of the ManageEngine OpUtils server Port (required): The port of the ManageEngine OpUtils server, default is 7080 API Key (required): ManageEngine...
ManageEngine OpManager
Last Updated: June 29, 2024ManageEngine OpManager is a monitoring solution that provides visibility into the performance of your routers, switches, firewalls, load balancers, wireless LAN controllers, servers, VMs, printers, and storage devices. ManageEngine OpManager allows you to drill down to the root cause of an issue and eliminate it. Parameters Host (required): The hostname or IP address of the ManageEngine...
ManageEngine Endpoint Center
Last Updated: July 9, 2024ManageEngine Endpoint Center (formerly ManageEngine Desktop Central) is a network-neutral Windows Desktop Management solution that provides software, patch, and update deployment, asset management, remote desktop, and multiple reports and tools. Configuring the Connector for ManageEngine Desktop Central To configure Lucidum to ingest data from ManageEngine Desktop Central: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add...
MalwareBytes
Last Updated: June 29, 2024MalwareBytes ThreatDown (previously Malwarebytes Endpoint Protection) is a cloud-based security platform that combines detection and remediation technologies into a single cloud-managed agent. Configuring the Connector for Malwarebytes Endpoint Protection To configure Lucidum to ingest data from Malwarebytes Endpoint Protection: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you...
Lucidchart
Last Updated: June 29, 2024Lucidchart is a visual workspace for diagramming, data visualization, and collaboration. Lucidchart is cloud-based and supports PC, Mac, and Linux. Parameters URL (required): The URL of the Lucidchart API, for example, https://api.lucid.co Client ID and Client Secret (required): Lucidchart API client ID and secret. The client ID must have account.user:readonly permissions Authorization Code (required): Lucidchart API authorization code (it requires Oauth2...
Lookout Mobile EDR
Last Updated: June 29, 2024Lookout Mobile EDR solution detects and responds to external and internal threats in real-time — from text messages designed to steal credentials to apps with risky connections — for both managed and unmanaged iOS, Android and ChromeOS devices, ensuring your enterprise and data remain protected.ed. Parameters URL (required): The URL of the Lookout Mobile Endpoint Security...
LogRhythm SIEM
Last Updated: June 29, 2024LogRhythm SIEM (Security Information and Event Management) is a is a self-hosted platform that provides holistic visibility into your network, embedded modules, dashboards, and compliance automation modules. Parameters Host (required): The hostname or IP address of the LogRhythm server Port (required): The port of the LogRhythm server, default is 8501 API Token (required): LogRhythm API token Verify SSL (optional,...
LogMeIn Central
Last Updated: June 29, 2024LogMeIn Central is a cloud-based, remote monitoring and management (RMM) solution that provides fast, secure HD remote access, critical patch management, actionable reports, and powerful IT automation. Parameters URL (required): The URL of the LogMeIn Central API, for example, https://secure.logmein.com Company ID (required): The company ID. Tt is required to Activate Inventory Reporting. API Key (required): LogMeIn Central API...
LogicMonitor
Last Updated: June 29, 2024LogicMonitor is a cloud-based network monitoring solution that provides observability across across cloud, on-premises, and hybrid environments and provides reporting capabilities across networks, servers, applications, websites, and containers. Configuring the Connector for LogicMonitor To configure Lucidum to ingest data from LogicMonitor: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
Litmos
Last Updated: June 29, 2024What is Litmos? Litmos is a cloud-based LMS (learning management system) that unifies virtual, classroom, mobile, and social learning. Litmos allows teams to collaborate, author, globally distribute, and track web-based training courses and schedule and track instructor-led courses. Why Should You Use the Litmos Connector? The Litmos connector provides visibility into the assets and data...
List of Connectors
Last Updated: July 18, 2024The published list of Connectors is a living document. Lucidum releases new Connectors each week and according to customer needs. The current list of Connectors reflects all the Connectors currently in production at customer sites. If you need a connector that does not appear on the list, please contact your Lucidum Account Representative.
LinkedIn Sales Navigator
Last Updated: June 29, 2024LinkedIn Sales Navigator provides sales tools that include advanced search features that identify target buyers, the world’s largest source of professional data, actionable insights to pinpoint the right buyers and understand how best to engage them, and clear privacy practices and sourced data. Parameters URL (required): The URL of the Sales Navigator API, for example, https://api.linkedin.com API...
LimaCharlie
Last Updated: June 29, 2024What is LimaCharlie? LimaCharlie provides security infrastructure as a service (SIaaS) and includes advanced endpoint detection and automated responses, normalizes security data, provides telemetry. Why Should You Use the LimaCharlie Connector? The LimaCharlie connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security...
LibreNMS
Last Updated: June 29, 2024What is LibreNMS? LibreNMS is a network monitoring solution that supports for a wide range of network hardware and operating systems and includes auto-discovery of network infrastructure, alerting, and bandwidth billing. Why Should You Use the LibreNMS Connector? The LibreNMS connector provides visibility into the assets in your environment. You can use this visibility to:...
LaunchDarkly
Last Updated: August 1, 2024What is LaunchDarkly? LaunchDarkly is a feature management platform that allows engineering teams to release, monitor, and optimize software in production. LaunchDarkly separates deployment from release, enabling developers to release progressively, roll back instantly, and safely modernize their tech stack. Why Should You Use the LaunchDarkly Connector? The LaunchDarkly connector provides visibility into the assets...
LastPass
Last Updated: July 17, 2024LastPass is a password manager that secures your passwords and personal information in an encrypted vault. Parameters URL (required) – The URL of the LastPass API. For example, https://api.lastpass.com. Provisioning hash (required) – Specify the provisioning hash used to make requests to the LastPass Business API. CID (Account number) (required) – Specify the CID (account number) used to make requests...
Lansweeper
Last Updated: June 29, 2024Lansweeper discovers all technology assets across your enterprise to increase visibility, reduce costs, improve efficiency, and manage risk. Configuring the Connector for Lansweeper To configure Lucidum to ingest data from Lansweeper: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect....
Lakeside Systrack
Last Updated: July 17, 2024Lakeside SysTrack is an end point monitoring platform that leverages an embedded AI engine and rich data set to proactively resolve complex issues. SysTrack captures data such as CPU, disk, memory, and other 10,000+ data points. These data points are then analyzed by SysTrack and used by IT. Configuring the Connector for Lakeside SysTrack To...
Lacework
Last Updated: July 8, 2024Lacework is a cloud-based security platform that provides compliance checks, automated threat defense, and intrusion detection for cloud workloads and services on AWS, GCP, Azure, and Kubernetes. Lucidum uses the Lacework Connector to ingest data from Lacework. Requirements To use the Lacework Connector in Lucidum: Before configuring the Lacework connector in Lucidum, you must first define...
Kolide K2
Last Updated: June 29, 2024What is Kolide K2? Kolide K2 provides asset management, endpoint security, compliance checks, and end-user self-remediation. Why Should You Use the Kolide K2 Connector? The Kolide K2 connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between assets, users,...
KnowBe4
Last Updated: July 17, 2024What is KnowBe4? KnowBe4 is an integrated platform that provides security awareness training and simulated phishing attacks to help manage the ongoing problem of social engineering. Why Should You Use the KnowBe4 Connector? The KnowBe4 connector provides visibility into the user in your environment. You can use this visibility to: ensure user are managed per...
Keycloak
Last Updated: June 29, 2024Keycloak is an open-source identity management and access management solution. Keycloak provides user federation, strong authentication, user management, and fine-grained authorization control. Configuring the Connector for Keycloak To configure Lucidum to ingest data from Keycloak: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you...
Kaspersky Security Center
Last Updated: March 18, 2025Kaspersky Security Center provides centralized execution of basic administration and maintenance tasks on an organization’s network. Kaspersky Security Center provides detailed information about the organization’s network security level and acts as a centralized administration console for all Kaspersky Lab security solutions and system administration tools. Configuring the Connector for Kaspersky Security Center To configure Lucidum...
Kaseya VSA
Last Updated: July 17, 2024Kaseya VSA (Virtual System Administrator) is a remote monitoring and management (RMM) solution that discovers and monitors all assets and creates a network topology map, automates software patch management, automates common IT processes, and auto-remediates incidents. Configuring the Connector for Kaseya VSA To configure Lucidum to ingest data from Kaseya VSA: Log in to Lucidum....
Kandji
Last Updated: July 7, 2025What is Kandji? Kandji is a cloud-based platform for centrally managing and securing your Mac, iPhone, iPad, and Apple TV devices that includes one-click compliance templates and 150+ pre-built automations, apps, and workflows. Why Should You Use the Kandji Connector? The Kandji connector provides visibility into the assets in your environment. You can use this...
Juniper Junos Space
Last Updated: June 29, 2024Junos Space Network Management Platform is a centralized platform for managing and orchestrating network devices and services. Junos Space Network Management Platform automates management of Juniper switching, routing, and security devices and provides broad fault, configuration, accounting, performance, and security management (FCAPS) capability, same day support for new devices and Junos OS releases, a task-specific...
Juniper Junos
Last Updated: June 29, 2024Juniper Junos operating system is a secure, open, and programmable network OS that enables network automation at scale. As the core component of Juniper’s routing, switching, and security portfolio, this cutting-edge network OS eliminates repetitive manual tasks associated with service deployment. Junos OS also serves as an open programmatic platform. Configuring the Connector for Junos...
JumpCloud
Last Updated: June 29, 2024JumpCloud is a cloud directory service that manages and connects users to their IT resources, including systems, servers, applications, producitivity suites, file storage, and networks. Configuring the Connector for JumpCloud To configure Lucidum to ingest data from JumpCloud: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find...
Jira Cloud Platform
Last Updated: June 29, 2024Jira Cloud platform provides a set of base functionality shared across all Jira products, such as issues, users, assets, and more. Jira products are built on top of the Jira Cloud platform. Currently, Lucidum supports users and assets connectors. Creating an API Key for Jira Before configuring the Jira connector in Lucidum, you must first...
JFrog Artifactory
Last Updated: January 8, 2026What is Artifactory? JFrog Artifactory is a universal DevOps solution providing end-to-end automation and management of binaries and artifacts through the application delivery process that improves productivity across your development ecosystem. Why Should You Use the Artifactory Connector? The Artifactory connector provides visibility into the assets in your environment. You can use this visibility to: ensure...
JetPatch
Last Updated: June 29, 2024JetPatch is an end-to-end automated patch, software distribution, and server lifecycle management platform. JetPatch provides multi-OS patching in a single platform (Windows, Linux, Unix) with intelligent prioritization, execution, and reporting. JetPatch configures, monitors, and manages agents. JetPatch discovers running software and deploys MSIs, EXEs, and RPMs. JetPatch continuously tests and validates critical services and configurations....
Jamf Protect
Last Updated: June 29, 2024What is Jamf Protect? Jamf Protect is an endpoint protection solution that prevents macOS malware, detects and remediates Mac-specific threats, and monitors endpoints for compliance. Why Should You Use the Jamf Protect Connector? The Jamf Protect connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed...
Jamf Pro
Last Updated: May 29, 2026What is Jamf Pro? Jamf Pro is an enterprise-level Mobile Device Management (MDM) tool that manages and secures Apple devices with advanced tools and integrations. Why Should You Use the Jamf Pro Connector? The Jamf Pro connector provides visibility into devices and mobile devices managed by Jamf. You can use this visibility to: ensure Jamf...
Ivanti Unified Endpoint Manager
Last Updated: June 29, 2024Ivanti Unified Endpoint Manager (formerly Landesk) gathers detailed device data (mainly for Windows desktops and servers), automates software and OS deployments, personalizes workspace environments, and fixes user issues. Configuring the Connector for Ivanti To configure Lucidum to ingest data from Ivanti: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
Ivanti Security Controls
Last Updated: June 29, 2024What is Ivanti Security Controls? Ivanti Security Controls provides unified and automated prevention, detection, and response techniques that target your biggest attack vectors. Ivanti Security Controls provides discovery, OS and application patch management, privilege management, and allowlisting. Why Should You Use the Ivanti Security Controls Connector? The Ivanti Security Controls connector provides visibility into the...
Ivanti Neurons for RBVM
Last Updated: June 29, 2024Ivanti Neurons for RBVM (formerly RiskSense) continuously correlates an infrastructure with vulnerability data, threat intelligence, manual pen test and research-based findings, and business asset criticality to measure risk and prioritize remediation activities. Parameters URL (required): The URL of the Ivanti Neurons for RBVM API API Key (required): Ivanti Neurons for RBVM API key Verify SSL (optional, default is...
Ivanti Neurons for Modern Device Management (MDM)
Last Updated: July 12, 2024Ivanti Neurons for Modern Device Management (MDM) (formerly MobileIron EMM) enables secure access to data and apps on any device across your agency, ensuring that only authorized users, devices, apps, and services can access agency resources. Parameters URL (required): The URL of the Ivanti Neurons for MDM API, for example, https://m.mobileiron.net Username and Password (required): Ivanti Neurons for...
Ivanti Endpoint Security
Last Updated: June 29, 2024What is Ivanti Endpoint Security? Ivanti Endpoint Security and device control delivers windows patching, application control, and antivirus from a single web-based console. Why Should You Use the Ivanti Endpoint Security Connector? The Ivanti Endpoint Security connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed...
Google Security Operations SIEM Actions
Last Updated: November 3, 2025Actions for Google Security Operations SIEM Send Data. Sends a custom set of Lucidum data to Google Security Operations SIEM. Use Cases Below are the possible use cases for the Send Data action: If you want to run Lucidum “headless”, you can send relevant data to Google Security Operations SIEM on a regular schedule. You...
HappyFox Actions
Last Updated: September 22, 2025Actions for HappyFox Lucidum includes the following Actions for HappyFox Help Desk: Create HappyFox Ticket. Create or update a ticket in HappyFox. The HappyFox action can customize the category, subject, message, and other fields. Create HappyFox Asset. Map Lucidum data to asset data in HappyFox Help Desk. Use Cases Below are the possible use cases...
Hunters Actions
Last Updated: September 22, 2025Actions for Hunters Send Data. Sends a custom set of Lucidum data to Hunters. Use Cases Below are the possible use cases for the Send Data action: If you want to run Lucidum “headless”, you can send relevant data to Hunters on a regular schedule. You can send data to Hunters for storage, analysis, and...
Microsoft Defender Actions
Last Updated: September 23, 2025Actions for Microsoft Defender Isolate Machine. Disconnects one or more devices from the network while retaining connectivity to the Defender for Endpoint service, which continues to monitor the device. Unisolate Machine. Reconnects one or more devices to the network. Devices that are behind a full VPN tunnel won’t be able to reach the Microsoft Defender...
Microsoft Sentinel Actions
Last Updated: September 23, 2025Actions for Microsoft Sentinel Send Data. Sends a custom set of Lucidum data to Microsoft Sentinel. Use Cases Below are the possible use cases for the Send Data action: If you want to run Lucidum “headless”, you can send relevant data to Microsoft Sentinel on a regular schedule. You can send data to Microsoft Sentinel...
Microsoft Teams Actions
Last Updated: September 23, 2025Actions for Microsoft Teams Post on Teams. Sends a custom set of Lucidum data to Microsoft Teams. Use Cases Below are the possible use cases for the Post on Teams action: You can send messages about high-risk alerts or incidents to specific Teams groups. For example, you could send a list of assets with a...
Opsgenie Actions
Last Updated: September 24, 2025Actions for Opsgenie Create Alert. Send an alert from Lucidum to Opsgenie. Opsgenie will deliver the alert according to its policies. Use Cases Below are the possible use cases for the Create Alert action: You can create an alert from Lucidum to Opsgenie when you find zombie users (users who are using applications in your...
Rapid7 Actions
Last Updated: September 24, 2025Actions for Rapid7 Create a New List of IPs/Hosts for Scanning. Send a list of IPs/host names to Rapid7 for scanning. Use Cases Below are the possible use cases for the Rapid7 action: Add previously unknown assets to your Rapid7 system. Scan for a specific vulnerability. Ensure you comply with regulations. Prerequisites To execute Rapid7...
ServiceNow Actions
Last Updated: September 24, 2025Actions for ServiceNow Create ServiceNow Assets (IRE API). Creates one or more new configuration items (CIs) in ServiceNow. Create/Update ServiceNow Assets (IRE API). Creates one or more new configuration items (CIs) in ServiceNow. If the one or more of the CIs already exist, this action updates the existing CIs. Use Cases Below are the possible...
Slack Actions
Last Updated: September 24, 2025Actions for Slack Post on Slack. Sends data (output fields) from the specified records (selected with a query) to a Slack channel. Use Cases Below are the possible use cases for the Post on Slack action: You can send messages about high-risk alerts or incidents to specific Slack channels. For example, you could send a...
Splunk Actions
Last Updated: September 24, 2025Actions for Splunk Send Webhook. Sends a custom set of Lucidum data to Splunk. Use Cases Below are the possible use cases for the Send Data action: If you want to run Lucidum “headless”, you can send relevant data to Splunk on a regular schedule. You can send data to Splunk for storage, analysis, and...
Sumo Logic Actions
Last Updated: September 24, 2025Actions for Sumo Logic Send Webhook. Sends a custom set of Lucidum data to Sumo Logic. Use Cases Below are the possible use cases for the Send Data action: If you want to run Lucidum “headless”, you can send relevant data to Sumo Logic on a regular schedule. You can send data to Sumo Logic...
Tenable Vulnerability Management Actions
Last Updated: September 25, 2025Actions for Tenable Vulnerability Management Send to Tenable Vulnerability Management Assets. Sends a custom set of Lucidum data to Tenable Vulnerability Management to import as assets. Launch Tenable Vulnerability Management Scan. Launches a scan in Tenable Vulnerability Management with a specified list of assets. Use Cases Below are the possible use cases for this action:...
Webhook Actions
Last Updated: March 10, 2025Lucidum also includes a type of action for webhooks. For details on webhooks, see the manual Running Headless with Webhooks.
Overview of Use Cases
Last Updated: January 8, 2026The Lucidum platform enables security, IT, and other teams to: Develop unique insights from de-duped, triangulated, and aggregated tech stack information Discover and describe previous unknowns — assets, users, and data Identify risks such as unmanaged assets, missing agents, outdated OS, apps, and more Accelerate alert triage, incident response, investigation, and remediation Enhance data security...
Full Inventory of Assets and Users
Last Updated: September 25, 2025Regardless of the security solutions you use in your environment, you cannot secure assets that you don’t know about. This becomes more urgent during mergers and acquisitions or fast growth, where you need an accurate inventory of assets. Lucidum ingests data from all the solutions in your environment. Lucidum’s Machine Learning algorithms then enrich the...
Full Inventory of Assets for Providers
Last Updated: September 25, 2025Regardless of the security solutions you use in your environment, you cannot secure assets that you don’t know about. This becomes more urgent during mergers and acquisitions or fast growth, where you need an accurate inventory of assets. Lucidum ingests data from all the solutions in your environment. Lucidum’s Machine Learning algorithms then enrich the...
Assets with End-of-Life Operating Systems
Last Updated: September 25, 2025End-of-Life versions of operating systems create risk in your environment. EOL operating systems are no longer patched by their vendors. Frequently, EOL operating systems are too out of date to run modern security agents. Frequently, EOL operating systems communicate infrequently with other devices on the network and are not associated with users, making them less...
AWS Security Groups
Last Updated: September 25, 2025An AWS security group controls the traffic inbound and outbound for AWS resources. For example, after you associate a security group with an EC2 instance, it controls the inbound and outbound traffic for the instance. Lucidum allows you to continuously audit and limit AWS security groups. With Luciudm, you can find unused security groups, monitor...
Azure Lift and Shift
Last Updated: September 25, 2025Lucidum ingests data from all the solutions in your environment. Lucidum Machine Learning algorithms then enrich the ingested data through deduplication, triangulation, and aggregation. This allows Lucidum to discover every asset and every account and user, even those not discovered by your security solutions, so you can protect your environment. For Microsoft environments, Lucidum can...
Binding Operational Directives
Last Updated: September 25, 2025The Cybersecurity & Infrastructure Security Agency (CISA) develops and oversees the implementation of binding operational directives (BODs). These directives require action on the part of certain federal agencies in the civilian Executive Branch. Lucidum can help you easily respond to BODs. BOD 23-01 CISA BOD 23-01 includes the following requirements: Requirement Lucidum Response Perform automated asset discovery...
Certificates About to Expire or Already Expired
Last Updated: September 25, 2025Expired certificates pose a grave security risk for businesses. When certificates expire, users and public-facing assets become susceptible to attack from hackers. In large organizations with many assets or in growing organizations with changing assets, it can be difficult to manage certificates in a timely manner. Lucidum ingests data from all the solutions in your...
Cloud Resources and Cost
Last Updated: September 25, 2025Traditional assessment solutions and vulnerability solutions cannot track the elastic and ephemeral nature of cloud workloads. Because these traditional tools are both scanner-based and time-based, cloud workloads can be launched and shut down before security solutions can detect them. Traditional assessment solutions and vulnerability solutions can also overlook new cloud instances, because cloud resources lend...
Lucidum and Cyber Insurance Requirements
Last Updated: September 25, 2025Cyber liability insurance provides businesses with insurance that protects the company in the event of data breaches and other cyber security issues. In 2021, the cyber insurance market continued to grow. The growth was fueled by high-profile cyber events and the ensuing massive payouts. Mordor Intelligence estimates that the cybersecurity insurance market was $9.29B in...
Overview of Cybersecurity Controls
Last Updated: January 8, 2026Businesses and organizations in the Kingdom of Saudi Arabia must comply with national security regulations. In this document, we will examine the following regulations and how Lucidum can help you comply with those regulations: The Critical Systems Cybersecurity Controls (‘CSCC’) prescribes the minimum cybersecurity requirements for critical systems in organizations. Critical systems are systems where...
Asset Management
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Asset Management Accurately Inventory and Identify IT Assets to implement and manage asset security controls. 2-1 2-5 3.3.3 2-1-1 2-1-2 2-6-1 2-6-2 2-6-4 Lucidum can help you accurately Inventory and identify assets and implement and manage asset security controls. After Lucidum ingests data from your security solutions, Lucidum uses...
Business Continuity and Disaster Recovery
Last Updated: July 22, 2024Category Requirement CSCC SAMA CSF ECC-1 Business Continuity & Disaster Recovery Show mechanisms that facilitate contingency planning controls to help ensure resilient assets and services. 2-8 3-1 3-1-1-1 3-1-1-2 2-4-4 2-9-1 2-9-2 2-9-3 2-9-3-1 2-9-4 3-1-1 3-1-2 3-1-3 3-1-3-1 3-1-3-2 3-1-3-3 3-1-4 To help manage business continuity and disaster recovery, Lucidum first helps you accurately...
Cloud Security
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Cloud Security Accurately inventory and identify cloud assets to ensure cloud instances are secure and follow industry best practices. 4-2 3.3.4 3.3.8 3.4.3 4-2-1 4-2-2 4-2-3 4-2-3-2 4-2-4 Lucidum can help you accurately inventory and identify cloud assets and ensure cloud instances are secure and follow industry best practices...
Compliance
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Compliance Provide visibility into the technology assets and information governance processes 1-4-2 2-13-4 3.2.5 1-8-1 1-8-3 Lucidum includes native features that help with compliance, such as: detecting assets without endpoint protection detecting assets without vulnerability scanning detecting unencrypted storage. This chapter describes these three features. Lucidum includes many...
Configuration Management
Last Updated: September 11, 2024Category Requirement CSCC SAMA CSF ECC-1 Configuration Management Maintain secure baseline configurations that are hardened and follow industry-accepted standards. 1-3-2-3 2-3-1-7 1-3-3 2-4-1 2-4-2 5-1-3-7 Lucidum can help you accurately Inventory and identify assets and implement and manage asset security controls. After Lucidum ingests data from your security solutions, Lucidum uses graph data, machine learning,...
Continuous Monitoring
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Continuous Monitoring Continuous inventory of IT assets and continuous monitoring of security posture and controls 2-11 3.3.14 2-3-4 2-12-1 2-12-2 2-12-3 2-12-4 5-1-3-3 You can trigger Lucidum to update data as frequently as needed. This includes ingesting new data and updating existing dashboards and queries. You can also create...
Data Classification and Handling
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Data Classification & Handling All data assets and all IT assets are categorized in accordance with applicable statutory, regulatory, and contractual requirements 2-6-1-2 2-1-5 2-7-3-2 4-2-3-1 Lucidum discovers every asset and every account in your environment, even those not discovered by your security solutions. Lucidum uses proprietary rule-based algorithms...
Endpoint Security
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Asset Management Accurately Inventory and Identify IT Assets to implement and manage asset security controls. 2-1 2-5 3.3.3 2-1-1 2-1-2 2-6-1 2-6-2 2-6-4 Lucidum can help you accurately Inventory and identify assets and implement and manage asset security controls. After Lucidum ingests data from your security solutions, Lucidum uses...
Identification and Authentication
Last Updated: September 26, 2025Category Requirement CSCC SAMA CSF ECC-1 Identification & Authentication Identify users and the assets and data to which they have access 2-2 2-2-1-5 3.3.5 2-2-1 2-2-2 2-2-4 Lucidum includes native features that help with identity management, such as: assets, users, and their relationships zombie users users not using MFA users not properly offboarded This chapter...
Incident Response
Last Updated: February 9, 2026Category Requirement CSCC SAMA CSF ECC-1 Incident Response Provide detailed reports on assets associated with incidents, prioritize incidents for mitigation, and automate mitigation tasks such as analysis, containment, patching, and changes to configuration. 3.3.15 2-13-1 2-13-2 2-13-3 2-13-3-2 2-13-4 Lucidum can help you identify assets associated with incidents, prioritize incidents for mitigation, and automate mitigation...
Threat Management
Last Updated: February 9, 2026Category Requirement CSCC SAMA CSF ECC-1 Threat Management Threat intelligence that includes cross-organization visibility and information-sharing to inform the development of system and security architectures, selection of security solutions, monitoring, threat hunting, and response and recovery activities. 3.3.16 2-10-4 2-13-1 2-13-2 2-13-3 2-13-4 Lucidum can help you manage threats across your organization and help you...
Identity and Access Management
Last Updated: September 25, 2025Managing user access is the first line of defense against cyber attacks. These use cases show how Lucidum can help you manage: Users who do not use IAM Root accounts that are not management with Privileged Access Management (PAM) Users who do not use MFA Users who do not use VPN Find Users Who Do...
Microsoft Defender Missing
Last Updated: September 25, 2025Lucidum can help you accurately identify assets that are not running Microsoft Defender for Endpoint. Endpoint security is an important part of an organization’s security posture. Ideally, all endpoints in your environment run an endpoint security solution. After Lucidum ingests data from your security solutions, Lucidum uses graph data, machine learning, and predictive analytics to...
Unencrypted Storage
Last Updated: September 25, 2025To comply with SOC 2, businesses need to encrypt all data storage. However, in large organizations, it can be difficult to find and audit all data storage. Lucidum ingests data from all the solutions in your environment. Lucidum Machine Learning algorithms then enrich the ingested data through deduplication, triangulation, and aggregation. This allows Lucidum to...
Zombie Users and Improper Offboardings
Last Updated: September 26, 2025Zombie users are those users who are using applications in your environment but are not managed in directory services. Zombie accounts have no verifiable owner. Zombie accounts are particularly challenging for businesses that have had layoffs, have frequent transfers within the company, use contractors, do seasonal hiring, and use interns. Zombie accounts leave your business...
Sending Lucidum Data to Microsoft Sentinel
Last Updated: September 25, 2025In this use case, we will use the Sentinel Action to send data to a data lake on Sentinel. This is also known as running Lucidum “headless”, because Sentinel users do not have to interact with Lucidum to use the data from Lucidum. Suppose that every day, you want to send a list of newly...
Zero-Day Vulnerabilities
Last Updated: September 25, 2025Zero-Day vulnerabilities are vulnerabilities that are publicly known but for which vendors have not yet provided patches. Zero-day vulnerabilities create risks for organizations. Organizations must monitor zero-day vulnerabilities and prioritize remediating affected assets. Frequently vendors provide mitigation steps until a patch is available. Organization must prioritize these mitigation steps and the patches. You must have...
Lucidum Normalization
Last Updated: February 9, 2026Lucidum fills the gaps between security solutions. After ingesting data from connectors, Lucidum enriches that data through machine learning. After ingestion, Lucidum: Deduplicates records. For example, suppose an asset uses DHCP. Suppose Lucidum ingests different information about that asset each day. However, each day, that asset will lease a new IP address. Instead of creating...
Zero-Day Vulnerabilities and CVEs
Last Updated: September 25, 2025On November 8, 2022, Microsoft released patches for six zero-day vulnerabilities that were active. Lucidum can help you quickly determine if assets in your environment are at risk from active vulnerabilities and CVEs like the six zero-day vulnerabilities from Microsoft. How Does Lucidum Help? Lucidum can monitor the status of all assets and users in...
Overview of the Lucidum Data Model
Last Updated: February 5, 2026What is the Lucidum Data Model? Input: Lucidum Connectors Lucidum integrates with other software and platforms via Connectors. Connectors allow Lucidum to ingest data from your environment. Lucidum includes pre-built connectors for the most commonly used solutions for security, vulnerability scanning, cloud, data warehouse, identity management, logs, network, endpoint management, IP management, file sharing, and devops....
Viewing Data About All Assets, All Users, and All Vulnerabilities
Last Updated: November 10, 2025Lucidum includes three Value-Oriented Dashboards that allow you to view data about all assets, all users, and all vulnerabilities. The tables appear in the Lucidum Channels Inventory > Assets. This table displays a list of all assets in Lucidum. Identify Identities. This table displays a list of all users in Lucidum. Threat Intelligence > Vulnerabilities....
Viewing Details about Individual Assets, Users, or Vulnerabilities
Last Updated: June 3, 2026Data Source, Lucidum Data Group, and Field Change History You can view details about the data for a single asset, user, or vulnerability. There are three types of data in Lucidum, all of of which you can view in Lucidum and use in dashboards: Data Source. Data sources map to Lucidum Connectors. For each asset,...
Viewing Details About Data Sources for Assets and Users
Last Updated: February 5, 2026The Data Sources pages display all the data sources that contribute data to asset records and user records. You can view metrics about each data source. You can also drill down and see which assets and which users are associated with each data source. Lucidum connectors provide the data to your lucidum system. Connectors allow...
Overview of Webhooks
Last Updated: September 26, 2025Introduction Lucidum uses webhooks to run headless, providing all the benefits of Lucidum without requiring your IT team to learn a new interface. Lucidum includes a feature called Actions. Actions are automations that are triggered by query results. Actions include sending email messages, posting a message to slack, creating tickets, isolating infected devices, or making...
Creating a Webhook Configuration
Last Updated: September 26, 2025Creating a webhook configuration in Lucidum is the first step toward sending data from Lucidum to another application or solution. Prerequisites Before defining the webhook configuration in Lucidum, you must first determine the URL that will listen for incoming webhooks on the application or solution. Usually you can find this information in the API documentation...
Creating Queries
Last Updated: June 25, 2025Webhooks include a payload. In Lucidum, the payload includes fields from the Lucidum Data Group or from other ingested data. To identify the data you want to include in a webhook, you filter through all the data in Lucidum with a query. You then save the results of the query to include in a webhook....
Creating a Webhook Action
Last Updated: September 26, 2025Creating a Webhook Action from the Action Center To create a Webhook Action from the Action Center page: In the Create a New Action page, in the General step, enter: Action Type. Select an action from the pulldown options. Configuration Name. Select an action configuration from the pulldown options. Action Name. Identifier for the action....
Use Case: Sumo Logic
Last Updated: September 26, 2025In this example, we will send a webhook to a data lake on Sumo Logic. Suppose that every day, you want to send a list of newly found VMs, Servers, and Workstations to a dashboard running in Sumo Logic. You could create a query that specified: show all the assets that are either VMs or...
Introduction
Last Updated: September 26, 2025Overview Lucidum includes query-based APIs for accessing the Lucidum database. This manual describes the Lucidum API v1.
Veracode
Last Updated: June 29, 2024What is Veracode? Veracode is an application security platform. It includes Veracode Static Analysis that provides automated feedback to your developers in the IDE and CI/CD pipeline, Veracode Dynamic Analysis that scans runtime applications, and Veracode software Composition Analysis (SCA) that identifies risks from open-source libraries. Why Should You Use the Veracode Connector? The Veracode...
Installing and Configuring the Lucidum App
Last Updated: September 29, 2025Downloading the Lucidum App To download the Lucidum app: In a browser, go to https://h3bboqrpq7.execute-api.us-east-1.amazonaws.com/prod/slack/install. Click Add to Slack to download the Lucidum app to Slack. Specify the Slack workspace where you want to install the Lucidum app. Slack requires multi-factor authentication. After authentication, you should see the following: Click Allow. Configuring the Connection for...
Using the Lucidum App
Last Updated: September 29, 2025You can use the Lucidum app to query data from your Lucidum system. The results are displayed in Slack. You can then share queries and results with your team, even if all members are not Lucidum users. NOTE: For details on displaying Lucidum notifications in slack, see https://lucidum.io/docs/notifications/#notifications_to_slack. Querying Data To query your Lucidum data...
Introduction to Managing Your Lucidum System
Last Updated: December 18, 2025The Settings tab in your Lucidum system allow you to manage your Lucidum system. The Settings tab includes: API Token Management Data Scheduler License Notifications Query Run History. For details, see Managing Historical Queries. System Preferences System Settings Theme Management Tunnel Proxy Settings. For details, see Configurating a Proxy Server. User Management. For details, see...
License Settings
Last Updated: November 6, 2025The License Settings page allows you to upload your Lucidum license and view information about your Lucidum license. Adding a License To add a Lucidum license to your Lucidum system: Go to Settings > License Settings. In the License Settings page, click on the Add New License (plus-sign) icon in the upper right. The Add...
System Settings
Last Updated: March 13, 2026The System Settings page defines technical settings that affect the Lucidum platform. To view the System Settings page: Go to Settings > System Settings. In the Query Settings page, you can edit the following fields: Connector Public IP. If you need to allow-list an IP address to allow Lucidum to ingest data from your environment,...
How Secure Are Your Assets?
Last Updated: September 25, 2025Modern EPP/EDR solutions require security agents to run on assets. These solutions require an IT team to view the console and determine which agents are online. The challenge with security agents is that security agents will not show you which assets are not managed with the agent. Each asset and user might use a different...
Viewing Charts
Last Updated: November 4, 2025After you load a dashboard, you can view the charts in that dashboard. Elements in a Chart Before Editing Before you click the Edit This Dashboard icon (pencil), each chart includes the following elements: The Chart Title for the chart. The data in the chart is defined by the query and the Summary for the...
Authentication
Last Updated: July 15, 2024You use the Lucidum API to authenticate API access. This chapter explains the authentication endpoint. Authentication: /v1/access_token The endpoint to authenticate for API access is /v1/access_token. Endpoint Method Parameters in Request Body /v1/access_token. POST clientID. The Client ID for your Lucidum account. See the section on Authorization Tokens to generate this value. secret. The Secret...
Tokens, Response Codes, Pagination, Methods, Caveats
Last Updated: September 26, 2025Lucidum includes query-based APIs for accessing the Lucidum database and the Lab database. This document describes how to use the Lucidum APIs. Authorization Tokens There are three tokens for accessing the Lucidum API. You can generate all three tokens from the Lucidum UI. Lucidum does not support SSO access for the Lucidum API. Basic authorization...
Endpoints
Last Updated: July 15, 2024You can use the Lucidum API to: Query the Lucidum database tables (/v1/data/cmdb) The following sections describe the endpoints for these actions. Query the Lucidum Database: /v1/data/cmdb The endpoint for querying the Lucidum database is /v1/data/cmdb. Endpoint Method Parameters in Request Body /v1/data/cmdb POST CollectionName. The Lucidum database table to query. Choices are: AWS_CMDB_Output. Table...
Examples
Last Updated: February 9, 2026Retrieve All Values from the Lucidum Database We could use the following cURL request to retrieve all values from the database table that contains asset data from current time period. This request is helpful to determine which fields are available. After you know which fields are available, you can use the outputFields parameter and the...
Overview of Lucidum API v2
Last Updated: June 25, 2025Lucidum includes query-based APIs for accessing the Lucidum Query Builder. This document describes how to use the Lucidum APIs v2. Endpoints The Lucidum API v2 includes the following endpoints: Retrieve the List of Fields for Assets (/CMDB/v2/data/metadata/asset). The response includes the same list of fields for an asset that you see in the New Query...
Authentication in API v2
Last Updated: June 10, 2026This chapter describes how to authenticate with the Lucidum API v2. The steps are: Generate a token. For LDG endpoints, see the section Generating a Bearer Token for /CMDB/v2/data/ldg Endpoint For all other endpoints, see the section on generating a standard bearer token associated with you Include the bearer token in the header of each...
Endpoints for Assets and Users
Last Updated: June 10, 2026You can use the Lucidum API to: Retrieve a list of available fields with a description and data type for each field Query Lucidum as you would from the Lucidum Query Builder, including using OR and AND statements The following sections describe the endpoints for these actions. Headers Requests to the endpoints in the Lucidum...
Endpoints for Change Management
Last Updated: June 25, 2025You can use the Lucidum API to: Retrieve a list of changes for a single asset or a single user with a description and data type for each field, the date of change, the old value, and the new value. Query Lucidum as you would from the Lucidum Query Builder, including using OR and AND...
Endpoints for System Metrics
Last Updated: June 3, 2026You can use the Lucidum API to query Lucidum about: the number of assets and the number of users the current license and its expiration date all active Connectors data ingestion jobs Action jobs The following sections describe the endpoints for these actions. Headers Requests to the endpoints in the Lucidum API v2 must also...
Pagination
Last Updated: July 15, 2024The Lucidum APIs can return multiple pages in a response. Lucidum recommends that you specify a page to return and the number of records to include in the page. Pagination Syntax To define pagination, include the following in the request body. "paging": { "page": 0, "recordsPerPage": 20 } “paging”:{. Specifies that that section between the...
Response Codes
Last Updated: July 15, 2024The Lucidum API v2 can return the following response codes: Response Code Description 200 Successful request 201 Created 400 Bad request 401 Unauthorized 403 Forbidden 404 Not Found 400001 Invalid numeric operator 400002 Invalid string operator 400003 Invalid Boolean operator 400004 Invalid list operator 400005 Invalid data operator 400006 Invalid page number 400007 Invalid item...
Ivanti Connect Secure
Last Updated: June 29, 2024Ivanti Connect Secure (formerly Pulse Connect Secure) provides a seamless, SSL VPN solution for remote and mobile users from any web-enabled device to corporate resources. Parameters Host (required): The hostname or IP address of the Ivanti Connect Secure server Username and Password (required): Ivanti Connect Secure username and password Verify SSL (optional, default is false): Verify the SSL...
Operators and Data Types
Last Updated: April 7, 2025Binary Binary fields contain either “0” (zero) or “1” (one). operator name display name description == is Field value is True or 1 Field value is False or 0 != is not Field value is not True or 1 Field value is not False or 0 exists exists Field exists and has a value empty...
iTop
Last Updated: June 28, 2024What is iTop? iTop is an open-source, multi-client web portal designed for service providers and businesses. iTop manages all configuration items and their relationships in a flexible CMDB. iTop manages user requests, incidents, problems, changes, and the service catalog in a single repository. Why Should You Use the iTop Connector? The iTop connector provides visibility...
Examples for Lucidum API v2
Last Updated: January 8, 2026This chapter includes examples of the Lucidum API v2. For details on the syntax for the Lucidum API v2, see the chapter on Endpoints for Assets and Users. Query Metadata In this example, we query the list of fields for assets from the Lucidum database. The response includes the same list of fields for an...
IT Glue
Last Updated: June 28, 2024What is IT Glue? IT Glue is a SOC-2 compliant, documentation management platform that consolidates information from PSA, SharePoint, Confluence, OneNote, Google Drive and more, into a single IT Glue repository for efficient search, storage, and retrieval. Why Should You Use the IT Glue Connector? The IT Glue connector provides visibility into the data in...
Island Enterprise Browser
Last Updated: May 15, 2025What is Island Enterprise Browser? Island Enterprise Browser provides fine-grained policy control over every facet of a user’s interaction with a web application, giving the enterprise limitless visibility, control, and compliance with their most critical applications. Why Should You Use the Island Enterprise Browser Connector? The Island Enterprise Browser connector provides visibility into the users...
Jira Cloud Actions
Last Updated: September 23, 2025Actions for Jira Cloud Platform Create Jira Issue. Creates a ticket in Jira. For each record that matches the base query, the output fields are attached to the Jira ticket. Creates a Jira Asset. Creates a Jira asset in Jira Service Management. Use Cases Below are the possible use cases for the Create Jira Issue...
Creating a Chart
Last Updated: January 28, 2026Introduction to Charts Lucidum includes the following types of charts: Bar Big Number Histogram. Line Nested Pie Pie Ring Gauge Stacked Bar Table Text When creating a new chart, there are: generic steps that apply to all charts chart-specific steps This chapter describes how to create each type of chart. Best Practices The Asset History...
IP Fabric
Last Updated: June 28, 2024What is IP Fabric? IP Fabric Automated Network Assurance Platform discovers, verifies, and documents large scale enterprise networks within minutes. IP Fabric automates network infrastructure data collection and provides predefined verifications that highlight inconsistencies, misconfigurations, and issues within enterprise networks. Why Should You Use the IP Fabric Connector? The IP Fabric connector provides visibility into...
Introduction to Connectors
Last Updated: September 8, 2025Connectors allow Lucidum to ingest data from your environment and discover, identify, and classify assets, data, and users. Lucidum includes pre-built connectors for the most commonly used solutions. The current list of Connectors reflects all the Connectors currently in production at customer sites. With over 500 connectors and counting, we’re sure we have yours.
Intezer Protect
Last Updated: June 28, 2024What is Intezer Protect? Intezer Protect is a Cloud Workload Protection Platform (CWPP) that defends your cloud infrastructure against unauthorized and malicious code. Intezer enables you to verify that you’re running 100% trusted code at all times by revealing the “genetic” origins of all running processes and applications. Intezer protects all types of cloud compute resources,...
Intel Data Center Manager (DCM)
Last Updated: July 12, 2024What is Intel DCM? Intel Data Center Manager (DCM) is a software solution that collects and analyzes the real-time health, power, and thermals of a variety of devices in data centers to help improve data center reliability and efficiency. Why Should You Use the Intel DCM Connector? The Intel DCM connector provides visibility into the...
Infoblox NetMRI
Last Updated: June 28, 2024What is NetMRI? Infoblox NetMRI is a proprietary network management product that delivers comprehensive network change and configuration management (NCCM). NetMRI automates network change, monitors the impact of changes on network health, manages network configurations, and meets a variety of compliance requirements. Offering physical and virtual appliance deployment options, NetMRI audits multi-vendor infrastructures, identifies anomalies...
Infoblox BloxOne DDI
Last Updated: July 12, 2024Infoblox BloxOne DDI is a cloud-managed DDI (DNS, DHCP, and IPAM) solution optimized for large-scale retail, remote, and branch office deployments. Creating Read-Only Role with API Access in Infoblox To create a read-only user account for the Lucidum connector, you must: create a custom role with the read-only permissions that the Lucidum connector needs create...
Infinipoint Zero Trust Workforce Access Platform
Last Updated: June 28, 2024What is Infinipoint Zero Trust Workforce Access Platform? Infinipoint Zero Trust Workforce Access Platform authenticates, secures and verifies both users and devices, at the point of access, and continuously throughout every session. Infinipoint Zero Trust Workforce Access Platform delivers phishing-resistant, passwordless authentication, and zero-device-trust posture verification. Why Should You Use the Infinipoint Zero Trust Workforce...
INAP
Last Updated: July 17, 2024What is INAP? INAP is a global provider of secure, performance-oriented, hybrid infrastructure that brings together an interconnected bare metal cloud, modern data center, and services on a single technology platform. Why Should You Use the INAP Connector? The IINAP connector provides visibility into the assets in your environment. You can use this visibility to:...
Imperva SecureSphere Database Activity Monitoring (DAM)
Last Updated: July 12, 2024What is Imperva SecureSphere Database Activity Monitoring (DAM)? Imperva SecureSphere Database Activity Monitoring (DAM) secures sensitive data stored in databases. SecureSphere provides full visibility into data usage, vulnerabilities, and access rights. It enables security, audit, and risk professionals to improve data security and meet compliance mandates. Why Should You Use the Imperva SecureSphere Database Activity...
Illumio Core Platform
Last Updated: June 28, 2024Illumio Core platform (formerly Illumio Adaptive Security Platform) delivers Zero Trust Segmentation across cloud and data center workloads to stop the spread of breaches. Illumio Core provides real-time visibility into the connectivity between workloads across the hybrid attack surface, generates optimal segmentation policies based on observed traffic flows, and executes the policy quickly at the...
IGEL Universal Management Suite (UMS)
Last Updated: July 12, 2024IGEL Universal Management Suite (UMS) is management software for secure, centralized, remote administration of IGEL OS devices. Configuring the Connector for IGEL UMS To configure Lucidum to ingest data from IGEL UMS: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure....
Icinga
Last Updated: June 28, 2024The Icinga stack spans six core strengths that cover all aspects of monitoring: infrastructure monitoring, monitoring automation, cloud monitoring, metrics and logs, analytics, and notifications. Across your entire infrastructure, Icinga provides visibility for any host and any application and provides detailed analysis for quick actions. Configuring the Connector for Icinga To configure Lucidum to ingest...
iCIMS
Last Updated: June 28, 2024What is iCIMS? The iCIMS Talent Cloud is a unified talent acquisition platform that improves how you attract, engage, hire and advance top candidates. Why Should You Use the iCIMS Connector? The iCIMS connector provides visibility into the users in your environment. You can use this visibility to: ensure users are managed per your security...
iboss Zero Trust SASE (Secure Access Service Edge)
Last Updated: June 28, 2024The iboss Zero Trust SASE (Secure Access Service Edge) (formerly iboss cloud) is a consolidated cloud security platform that replaces the capabilities of VPN, Proxy appliances, and VDI with next-gen ZTNA, Secure Access Service Edge, and Browser Isolation. iboss Zero Trust SASE securely connects remote users to on-prem and cloud applications directly and securely with...
IBM Tivoli Application Dependency Discovery Manager (TADDM)
Last Updated: September 12, 2025What is IBM TADDM? IBM Tivoli Application Dependency Discovery Manager (TADDM) is a configuration management tool that ensures and improves application availability in application environments. TADDM provides the details of configuration items (CIs) using automated, agentless discovery of assets and their application dependencies. TADDM also includes discovery library technology to help leverage data from other...
IBM SevOne Network Performance Management (NPM)
Last Updated: June 28, 2024IBM SevOne Network Performance Management (NPM) (formerly SevOne Data Platform) is an application-aware network performance monitoring system. SevOne NPM transforms raw network performance data from infrastructure across the entire delivery chain into actionable insights. SevOne NPM delivers a comprehensive view of the network and how performance affects the applications. Parameters URL (required): The URL of the...
IBM Security Randori Recon
Last Updated: June 28, 2024BM Security Randori Recon (formerly Randori) is a SaaS-based attack surface management that monitors internal and external attack surfaces for unexpected changes, blind spots, misconfigurations, and process failures. It is part of the IBM Security portfolio. Configuring the Connector for IBM Security Randori Recon To configure Lucidum to ingest data from IBM Security Randori Recon: Log in...
IBM Security QRadar
Last Updated: June 28, 2024What is IBM QRadar? IBM Security QRadar is a threat detection and response suite that includes QRadar SIEM, QRadar SOAR, QRadar EDR, and QRadar Log Insights. Each product is embedded with enterprise-grade AI and automation. The portfolio uses a common user interface, shared insights, and connected workflows. Why Should You Use the IBM QRadar Connector?...
IBM Security Guardium
Last Updated: June 28, 2024What is Guardium? IBM Security Guardium is a family of data security software that uncovers vulnerabilities and protects sensitive on-premises and cloud data. IBM Security Guardium prevents leaks from databases, data warehouses, file systems, and Big Data environments such as Hadoop, ensures the integrity of information and automates compliance controls across heterogeneous environments. Why Should...
IBM Maximo
Last Updated: July 17, 2024What is IBM Maximo? IBM Maximo Application Suite is a set of applications for asset monitoring, management, predictive maintenance, and reliability planning. Why Should You Use the IBM Maximo Connector? The IBM Maximo connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies...
IBM MaaS360
Last Updated: June 28, 2024What is IBM MaaS360? IBM MaaS360 is a unified endpoint management (UEM) solution for iOS, Android, iPadOS, MacOS, Windows endpoints, and frontline worker devices. IBM MaaS360 detects threats and automates remediation across your users, devices, apps, data and network. The MaaS360 Portal supports portal administration functions, device management, software distributions, policy self-service, and device compliance...
IBM Hardware Management Console (HMC)
Last Updated: July 12, 2024What is IBM HMC? The IBM Hardware Management Console (HMC) is a hardware appliance that configures and controls one or more managed systems. The HMC can create and manage logical partitions and activate Capacity Upgrade on Demand. The HMC communicates with managed systems to detect, consolidate, and send information to service and support for analysis....
HCL BigFix
Last Updated: July 29, 2024What is HCL BigFix? HCL BigFix provides remote control, patch management, software distribution, operating system deployment, network access protection and hardware and software inventory functionality. Why Should You Use the HCL BigFix Connector? The HCL BigFix connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed...
HYPR Passwordless
Last Updated: June 28, 2024What is HYPR Passwordless? HYPR Passwordless is an Identity Assurance solution that provides the passkey-based authentication, continuous risk monitoring, and intelligent identity verification. HYPR Passwordless detects, prevents, and eliminates identity-related risks at every point in the identity lifecycle, from onboarding to offboarding. Why Should You Use the HYPR Passwordless Connector? The HYPR Passwordless connector provides...
HubSpot
Last Updated: September 12, 2025What is HubSpot? HubSpot is a CRM platform that includes tools for marketing, sales, customer service, operations, and website-building. Why Should You Use the HubSpot Connector? The HubSpot connector provides visibility into assets used by the marketing and sales organizations. You can use this visibility to: ensure assets are managed per your security policies align...
HPE OneView
Last Updated: July 17, 2024What is HPE OneView? HPE OneView is an integrated IT infrastructure management software that automates IT operations and manages the lifecycle of software-defined infrastructure across compute, storage, and networking. Why Should You Use the HPE OneView Connector? The HPE OneView connector provides visibility into hardware, networks, storage, cloud, and security in your environment. You can...
HPE Intelligent Management Center (IMC)
Last Updated: September 12, 2025What is HPE IMC? HPE Intelligent Management Center (IMC) is a comprehensive management platform that supports the Fault, Configuration, Accounting, Performance, Security (FCAPS) model for wired and wireless networks. It provides features and functions that are designed for comprehensive management of the network infrastructure. Why Should You Use the HPE IMC Connector? The HPE IMC...
HPE Integrated Lights-Out (iLO)
Last Updated: July 12, 2024What is HPE iLO? HPE Integrated Lights-Out (iLO) is a proprietary management technology built into HPE products that allows for remote control access to ProLiant servers, even without being connected to the network (out-of-band management). HPE Integrated Lights-Out (iLO) automates system provisioning and firmware updates, monitors server health, and enables troubleshooting. Why Should You Use...
HP Device Manager
Last Updated: June 28, 2024HP Device Manager allows IT admins to remotely deploy, update, and manage thousands of HP Thin Clients through a single console. HP Device Manager is included with HP Thin Clients. Configuring the Connector for HP Device Manager To configure Lucidum to ingest data from HP Device Manager: Log in to Lucidum. In the left pane,...
HiBob
Last Updated: July 17, 2024HiBob is an HRIS (Human Resource Information System) that automates core HR processes, provides onboarding for new employees, manages performance, compensation, time-off, attendance, and payroll, provides employee surveys and analytics, and a includes a service that allows employees to report issues anonymously. Configuring the Connector for HiBob To configure Lucidum to ingest data from HiBob:...
Hexagon HxGN EAM
Last Updated: June 28, 2024What is Hexagon HxGN EAM? Hexagon HxGN EAM (formally Infor EAM) is a SaaS-based, enterprise asset management solution that provides full visibility into asset performance to enable longer asset lifecycles, and improved performance, quality, and profitability. Why Should You Use the HxGN EAM Connector? The HxGN EAM connector provides visibility into the assets in your...
Heimdal
Last Updated: June 28, 2024Heimdal provides a unified platform for threat prevention, vulnerability management, access management, patch management, antivirus, and e-mail security. Configuring the Connector for Heimdal To configure Lucidum to ingest data from Heimdal: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect....
HashiCorp Consul
Last Updated: June 28, 2024HashiCorp Consul is a multi-networking tool that offers a fully-featured service mesh solution. It solves the networking and security challenges of operating microservices and cloud infrastructure in multi-cloud and hybrid cloud environments. Configuring the Connector for HashiCorp Consul To configure Lucidum to ingest data from HashiCorp Consul : Log in to Lucidum. In the left...
Halcyon Anti-Ransomware
Last Updated: June 28, 2024What is Halcyon? Halcyon Anti-Ransomware Platform is an endpoint augmentation solution built to stop ransomware from impacting your business. Why Should You Use the Halcyon Connector? The Halcyon connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies ensure user are managed...
GYTPOL
Last Updated: July 17, 2024What is GYTPOL Validator? GYTPOL is a security configuration management solution that provides continuous monitoring of all devices and performs accurate detection and fast remediation of security blind spots, device misconfiguration, and human errors. Why Should You Use the GYTPOL Validator Connector? The GYTPOL connector provides visibility into the users in your environment. You can...
Guardicore Centra Security Platform
Last Updated: June 28, 2024What is Guardicore Centra Security Platform? The Guardicore Centra Security Platform is a data center and cloud security solution that delivers micro-segmentation controls to reduce the attack surface and detect and control breaches within east-west traffic. Why Should You Use the Guardicore Centra Security Platform Connector? The Guardicore Centra Security Platform connector provides visibility into...
GreyNoise
Last Updated: June 28, 2024GreyNoise is a cybersecurity platform that collects and analyzes Internet-wide scan and attack traffic. This data is made available through the web-based Visualizer and GreyNoise APIs so users can contextualize existing alerts, filter false-positives, identify compromised devices, and track emerging threats. Configuring the Connector for GreyNoise To configure Lucidum to ingest data from GreyNoise: Log...
Greenbone OpenVAS
Last Updated: June 28, 2024Greenbone OpenVAS is an open-source vulnerability scanner that is part of Greenbone Vulnerability Management (GVM), a software framework that offers vulnerability scanning and management. Greenbone OpenVAS includes unauthenticated and authenticated testing, various high-level and low-level internet and industrial protocols, performance tuning for large-scale scans and an internal programming language. Configuring the Connector for OpenVAS To...
Google Workspace Endpoint Manager
Last Updated: June 28, 2024What is Google Workspace Endpoint Manager? Google Workspace Endpoint Manager manages security for mobile devices, desktops, laptops, Chromebooks, and other endpoints. Why Should You Use the Google Workspace Endpoint Manager Connector? The Google Workspace Endpoint Manager connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed...
Google Workspace Drive
Last Updated: June 28, 2024What is Google Workspace Drive? Google Workspace Drive provides cloud storage for files, where users can access, share, and sync files. Why Should You Use the Google Workspace Drive Connector? The Google Drive connector provides visibility into cloud storage assets in your environment. You can use this visibility to: ensure assets are managed per your...
Google Cloud
Last Updated: May 29, 2026What is Google Cloud Platform? Google Cloud Platform provides public cloud infrastructure and includes services for computing and hosting, storage and database, networking, big data, and machine learning Why Should You Use the Google Cloud Platform Connector? The Google Cloud Platform connector provides visibility into the assets in your environment. You can use this visibility...
Google Security Operations SIEM
Last Updated: April 20, 2026What is Google Security Operations SIEM? Chronicle is a cloud service, built as a specialized layer on top of core Google infrastructure, designed for enterprises to privately retain, analyze, and search the massive amounts of security and network telemetry they generate. Chronicle SIEM normalizes, indexes, correlates, and analyzes the data to provide instant analysis and...
GoDaddy
Last Updated: July 17, 2024GoDaddy provides domain registration and web hosting along with tools to build sites, email hosting, and marketing tools Requirements To use the GoDaddy Connector in Lucidum: Before configuring the GoDaddy connector in Lucidum, you must first define an API Key and API Secret in GoDaddy. Lucidum will use the API key and API secret to access...
GitLab
Last Updated: June 28, 2024What is GitLab? GitLab is a web-based platform that manages the development, security, and deployment of software. The GitLab platform includes Git repository hosting, project management, CI/CD pipelines, and issue tracking. GitLab also provides AI-powered workflows, automation, built-in security, and the ability to deploy anywhere. Why Should You Use the GitLab Connector? The GitLab connector...
GitHub
Last Updated: May 28, 2026What is GitHub? GitHub is a cloud-based platform that allows developers to store, track, and collaborate on software projects. GitHub is based on Git, an open-source version control tool that allows multiple people to make changes to source files at the same time. Why Should You Use the GitHub Connector? The GitHub connector provides visibility...
Gigamon ThreatINSIGHT
Last Updated: June 28, 2024Gigamon ThreatINSIGHT is a SaaS-based network security monitoring platform that detects, responds, and investigates network-based threats. ThreatINSIGHT includes metadata search of supported protocols, visualization tools for tracking the different aspects of your network, and automated threat-detections with alerting functionality. Configuring the Connector for Gigamon ThreatINSIGHT To configure Lucidum to ingest data from Gigamon ThreatINSIGHT: Log...
Gigamon GigaVUE-FM
Last Updated: June 28, 2024GigaVUE-FM fabric manager automates the configuration, management, and operation of the Gigamon Deep Observability Pipeline, with visibility across physical, virtual, and multi-cloud deployments. GigaVUE-FM fabric manager includes policy automation, a customizable dashboard, role-based access control, end-to-end topology visualization, simplified workflows, external SNMP support, and alarm management. Configuring the Connector for Gigamon GigaVUE-FM To configure Lucidum to...
Freshservice
Last Updated: November 3, 2025What is Freshservice? Freshservice is a cloud-based IT service desk that includes incident, problem, change, release, service request, and asset management and a knowledge base. Why Should You Use the Freshservice Connector? The Freshservice connector provides visibility into the assets and users managed by the service desk tools. You can use this visibility to: monitor...
FreeIPA
Last Updated: June 28, 2024What is FreeIPA FreeIPA is an open source, integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers. Why Should You Use the FreeIPA Connector?...
Forward Networks
Last Updated: June 28, 2024What is Forward Networks? Forward Enterprise from Forward Networks analyzes and verifies network behaviors and security posture, to proactively surface configuration errors and policy intent violations. Based on a mathematical model, the Forward Enterprise digital twin is a virtual representation of the entire network, capable of computing every possible path a packet could take. Using...
Fortra Vulnerability Management
Last Updated: June 28, 2024What is Fortra Vulnerability Management? Fortra Vulnerability Management (formerly Frontline Vulnerability Manager) is an in-depth SaaS security scanner that identifies, analyzes, and prioritizes weaknesses in your network. Why Should You Use the Fortra Vulnerability Management Connector? The Fortra Vulnerability Management connector provides visibility into the vulnerability management on assets in your environment. You can use...
Fortinet FortiGate
Last Updated: June 28, 2024What is FortiGate? Fortinet FortiGate next generation firewalls (NGFWs) provide industry-leading threat protection and decryption at scale with a custom ASIC architecture. They also deliver Secure Networking with integrated features like SD-WAN, switching and wireless, and 5G. Why Should You Use the FortiGate Connector? The FortiGate connector provides visibility into the traffic allowed on your...
Fortify Software Security Center
Last Updated: June 28, 2024What is Fortify Software Security Center? Fortify Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities. Fortify Software Security Center secures all software in the enterprise, regardless of whether it is developed in-house, procured from vendors, or running in production. Why Should...
FortiEDR
Last Updated: July 9, 2024What is FortiEDR? FortiEDR delivers automated endpoint security that integrates with the Fortinet Security Fabric and third-party solutions to reduce MTTR. FortiEDR proactively shrinks the attack surface, prevents malware infection, detects and defuses potential threats immediately, and automates response and remediation procedures with customizable playbooks across legacy and current operating systems. Why Should You Use...
FortiClient Enterprise Management Server (FortiClient EMS)
Last Updated: July 17, 2024What is FortiClient EMS? FortiClient Enterprise Management Server (FortiClient EMS) provides scalable and centralized management of endpoints running FortiClient. FortiClient EMS provides visibility across the network to securely share information and assign security profiles to endpoints and includes automated capabilities for device management and troubleshooting. Why Should You Use the FortiClient EMS Connector? The FortiClient...
ForgeRock Directory Services
Last Updated: June 28, 2024What is ForgeRock Directory Services? ForgeRock Directory Services provides LDAP-based directory service and includes the ForgeRock Directory Server and the ForgeRock Directory Proxy Server. The ForgeRock Directory Server stores identities for users, devices, and things in a highly available and secure way. The ForgeRock Directory Proxy Server increases the availability of a Directory Service deployment,...
Forcepoint Web Security
Last Updated: June 28, 2024Forcepoint Web Security is a software application that runs on endpoint machines, protecting users from malware and enforcing organization’s acceptable user policy. Configuring the Connector for Forcepoint Web Security To configure Lucidum to ingest data from Forcepoint Web Security: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you...
FlexNet Manager Suite for Cloud
Last Updated: July 9, 2024FlexNet Manager Suite for Cloud manages software assets and optimizes licenses for all platforms and software throughout the software lifecycle. Configuring the Connector for FlexNet Manager Suite for Cloud To configure Lucidum to ingest data from FlexNet Manager Suite for Cloud: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
Flexera One
Last Updated: June 28, 2024Flexera One is an SaaS-based IT management solution that provides a comprehensive view of the IT landscape, from precise on-premises and multi-cloud environment usage, to underutilized software as a Service (SaaS) subscriptions, license redundancies, and shadow IT. Configuring the Connector for Flexera One To configure Lucidum to ingest data from Flexera One: Log in to...
FireMon Security Manager
Last Updated: June 28, 2024FireMon Security Manager is a network security policy management (NSPM) platform that automates the management of firewall and cloud security policies to eliminate policy-related risk, accurately and quickly change rules, and meet internal and external compliance requirements. Configuring the Connector for FireMon Security Manager To configure Lucidum to ingest data from FireMon Security Manager: Log...
F5 Distributed Cloud App Infrastructure Protection (AIP)
Last Updated: September 19, 2024F5 Distributed Cloud App Infrastructure Protection (AIP) (formerly Threat Stack) is a cloud security and compliance platform for application infrastructure. F5 Distributed Cloud AIP allows organizations to quickly and efficiently detect and respond to known risks, anomalies, and vulnerabilities, at scale and throughout the environment, while staying in compliance. Parameters URL (required): The URL of the...
F5 BIG-IQ Centralized Management
Last Updated: June 28, 2024F5 BIG-IQ Centralized Management manages BIG-IP devices, and all of their services (such as LTM, AFM, ASM and so forth), and their licensing from one location. You can discover, upgrade, deploy policy changes, manage licenses, and monitor health, traffic, and security. Configuring the Connector for F5 BIG-IQ iControl To configure Lucidum to ingest data from...
F5 BIG-IP iControl
Last Updated: June 28, 2024F5 BIG-IP iControl is a web services-enabled open API that provides granular control over the configuration and management of BIG-IP. You can use F5 BIG-IP iControl to modify F5 BIG-IP configurations, for example adding servers dynamically to an application pool, stopping requests to an application server, changing how requests are routed to servers, and performing...
EZOfficeInventory
Last Updated: June 28, 2024EZOfficeInventory is a cloud-based asset tracking platform for tracking, managing and maintaining assets. EZOfficeInventory automates depreciation calculation for assets and accurately assess asset utilization. Configuring the Connector for EZOfficeInventory To configure Lucidum to ingest data from EZOfficeInventory: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
ExtremeCloud IQ
Last Updated: June 28, 2024ExtremeCloud IQ is a SaaS-based solution that delivers unified, full-stack management of access points, switches, and SD-WAN. ExtremeCloud IQ uses ML technologies to analyze and interpret network and user data points, from the edge to the data center, to deliver business and IT insights and network automation and intelligence. Configuring the Connector for ExtremeCloud IQ...
Extreme Networks ExtremeWireless WiNG
Last Updated: June 28, 2024xtreme Networks ExtremeWireless WiNG is an operating system designed for WLAN networking. The ExtremeWireless WiNG software distributes intelligence to the network edge, empowering every controller and access point to be network-aware, able to identify and dynamically route traffic over the most efficient path available at that time. ExtremeWireless WiNG is highly scalable and well suited...
ExtraHop Reveal(x)
Last Updated: June 28, 2024ExtraHop Reveal(x) is a cloud-native Network Detection and Response (NRD) platform that uses real-time analytics and machine learning on wire data to detect anomalous behavior impacting critical assets. Reveal(x) then maps the anomalous behavior to one or more steps in the attack chain and provides an analysis-first workflow to find root cause. Configuring the Connector...
Eracent
Last Updated: June 28, 2024Eracent delivers automated Software Asset Management (SAM) and IT Asset Management (ITAM) solutions. Eracent includes cross-platform discovery, application recognition, and software utilization analytics to provide comprehensive asset and license management and risk management. Configuring the Connector for Eracent To configure Lucidum to ingest data from Eracent: Log in to Lucidum. In the left pane, click Connector. In...
Endgame
Last Updated: June 28, 2024Endgame is an endpoint security platform that prevents, detects, and responds to known and unknown threats at the earliest and all stages of the attack lifecycle. Configuring the Connector for Endgame To configure Lucidum to ingest data from Endgame: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you...
Elastic
Last Updated: July 17, 2024What is Elastic Cloud? Elastic Cloud includes Elastic Enterprise Search, Elastic Observability, Elastic Security, and Elastic Stack. Elastic Stack includes Elasticsearch, Kibana, Beats, and Logstash. Elastic Cloud runs in the public cloud of your choice. Why Should You Use the Elastic Cloud Connector? The Elastic Cloud connector provides visibility into the assets in your environment....
EfficientIP SOLIDserver DDI
Last Updated: June 28, 2024EfficientIP SOLIDserver DDI suite delivers scalable, secure and robust virtual and hardware appliances for critical DNS-DHCP-IPAM services. Configuring the Connector for SOLIDServer DDI To configure Lucidum to ingest data from SOLIDServer DDI: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure....
Edgescan
Last Updated: June 28, 2024Edgescan Risk-based Vulnerability Management (RBVM) platform identifies, evaluates, and properly (re)configures the security of hybrid infrastructures to reduce exposures and prioritize remediation. Edgescan RBVM provides ‘full stack’ coverage that includes web application, network layer (host/server) and API security testing. Configuring the Connector for Edgescan To configure Lucidum to ingest data from Edgescan: Log in to...
Eclypsium
Last Updated: June 28, 2024The Eclypsium platform identifies, verifies, and fortifies 3rd-party software, firmware and hardware in every endpoint, server and network appliance in the enterprise infrastructure (IT, cloud, data centers, and network). Eclypsium continuously monitors firmware, hardware and software for threats, backdoors, implants and vulnerabilities, and mitigates supply chain risks throughout the asset lifecycle. Configuring the Connector for...
Dynatrace
Last Updated: June 28, 2024Dynatrace is a platform that delivers analytics and automation for unified observability and security. Dynatrace provides Infrastructure Observability, Application Observability, Application Security, Digital Experience monitoring, Business Analytics, and Automations. Configuring the Connector for Dynatrace To configure Lucidum to ingest data from Dynatrace: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector....
Duo Premier
Last Updated: June 28, 2024Duo Premier (formerly Duo Beyond) provides secure access to internal applications without using VPNs. Duo Premier expands secure access past traditional perimeter-based network security with the power to grant access to any application, to any user, from any device, while maintaining security hygiene. Creating an API Key for Duo Before configuring the Duo connector in...
DTEX InTERCEPT
Last Updated: June 28, 2024DTEX InTERCEPT is a cloud-native platform that detects and mitigatea insider risks before data loss occurs. DTEX InTERCEPT combines AI/ML, data loss prevention, user behavior analytics, and user activity monitoring in a light-weight platform to manage proactive insider risk without sacrificing employee privacy or network performance. Parameters URL (required): The URL of the Dtex API API Key (required): Dtex API key...
Druva Cloud Platform
Last Updated: July 17, 2024Druva Cloud Platform is a SaaS-based service that combines scalable all-in-one backup, disaster recovery (DR), archival, and analytics to simplify data protection and improve data visibility. Configuring the Connector for Druva To configure Lucidum to ingest data from Druva: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you...
Dragos
Last Updated: June 28, 2024Dragos Platform is an operational technology (OT) cybersecurity system that provides visibility of industrial control system (ICS) assets and communications. The Dragos Platform identifies threats via ICS network monitoring and analytics, identifies and provides risk-based prioritization of vulnerabilities, and provides playbooks to investigate and respond to threats. Configuring the Connector for Dragos To configure Lucidum...
Domotz
Last Updated: July 9, 2024Domotz provides SaaS-based network monitoring, network management, infrastructure monitoring, and endpoint monitoring. Configuring the Connector for Domotz To configure Lucidum to ingest data from Domotz: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears. In the Settings page, enter the...
Domain Certificate
Last Updated: June 28, 2024The Domain Certificate connector finds a list of subdomains for a domain and finds the certificates for the main domain and each subdomain. Why Should You Use the Domain Certificate Connector? The Domain Certificate connector provides visibility into certificates for your domain and subdomains. You can use this visibility to: monitor certificate expiration renew certificates...
Docusign
Last Updated: June 28, 2024Docusign IAM (Intelligent Agreement Management) is a SaaS-based platform for end-to-end agreement management that includes electronic signatures, electronic notarization, automated workflows for contract lifecycle management, searchable dashboards, identity verification, and document generation. Configuring the Connector for DocuSign To configure Lucidum to ingest data from DocuSign: Log in to Lucidum. In the left pane, click Connector. In...
DNS Made Easy
Last Updated: June 28, 2024DNS Made Easy offers DNS services including managed DNS, secondary DNS, analytics, domain registration, and email. DNS Made Easy also offers a GUI control panel with services like services like global traffic director, HTTP redirection, and failover. Configuring the Connector for DNS Made Easy To configure Lucidum to ingest data from DNS Made Easy: Log...
DivvyCloud
Last Updated: June 28, 2024DivvyCloud protects your cloud and container environments from misconfigurations, policy violations, threats, and IAM challenges. DivvyCloud provides automated, real-time remediation to aid security and compliance. Configuring the Connector for DivvyCloud To configure Lucidum to ingest data from DivvyCloud: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find...
Digital Guardian
Last Updated: June 28, 2024Digital Guardian DLP is a SaaS-based platform for data-loss prevention that monitors and controls the flow of sensitive data via the network, email or web. Digital Guardian DLP classifies, monitors, and controls sensitive data across your networks, storage repositories, databases, and cloud applications. Configuring the Connector for Digital Guardian To configure Lucidum to ingest data...
DigiCert CertCentral
Last Updated: June 28, 2024DigiCert CertCentral consolidates tasks for issuing, installing, inspecting, remediating, and renewing public TLS/SSL, Verified Mark, Code Signing, Document Signing, and Client and S/MIME certificates. Configuring the Connector for DigiCert To configure Lucidum to ingest data from DigiCert: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
Device42
Last Updated: June 28, 2024Device42 is an IT infrastructure management software suite that includes agentless auto-discovery, application dependency mapping, a configuration management database (CMDB), data center infrastructure management (DCIM), IT asset & inventory management (ITAM) functionality, IP address management (IPAM), and password management. Configuring the Connector for Device42 To configure Lucidum to ingest data from Device42: Log in to...
Dell OpenManage Enterprise
Last Updated: June 28, 2024Dell OpenManage Enterprise is a management and monitoring application that provides a comprehensive view of the Dell servers, chassis, storage, and network switches in the enterprise network and enables management of those devices. Configuring the Connector for Dell OpenManage Enterprise To configure Lucidum to ingest data from Dell OpenManage Enterprise: Log in to Lucidum. In...
Dell Integrated Dell Remote Access Controller (iDRAC)
Last Updated: July 12, 2024Dell Integrated Dell Remote Access Controller (iDRAC) is a remote server management processor included with Dell EMC PowerEdge servers. Dell iDRAC allows secure local and remote server management and helps IT administrators deploy, update, and monitor Dell EMC PowerEdge servers. Configuring the Connector for Dell iDRAC To configure Lucidum to ingest data from Dell iDRAC:...
Dell Avamar
Last Updated: June 28, 2024Dell Avamar is deduplication backup software and provides full backups and single-step data recovery. Avamar provides daily full backups of physical and virtual environments, NAS servers, enterprise applications, remote offices, and desktops/laptops. Configuring the Connector for Dell Avamar To configure Lucidum to ingest data from Dell Avamar: Log in to Lucidum. In the left pane,...
Delinea Secret Server
Last Updated: July 9, 2024Delinea Secret Server is an enterprise password access management (PAM) solution that securely stores, manages, and controls access to privileged credentials. Delinea Secret Server improves the security of sensitive data, reduces the risk of data breaches, and streamlines the password management process. Why Should You Use the Delinea Secret Server Connector? The Delinea Secret Server...
Delinea Privilege Manager
Last Updated: June 28, 2024Delinea Privilege Manager (formerly Thycotic Privilege Manager) mitigates risk from malware and modern security threats by removing local administrative rights and enforcing least privilege on endpoints. Delinea Privilege Manager delivers centralized privilege management and applies Zero Trust principles, just-in-time access, and just-enough privilege to defend the enterprise. Privilege elevation and integrated application control allow productivity...
DefenseStorm
Last Updated: July 17, 2024DefenseStorm is an integrated platform of cyber risk assessment, governance, security, and fraud solutions that ensure financial institutions achieve and maintain cyber risk readiness. The intelligent data engine, GRID ACTIVE, ensures real-time access, analysis, and action on all critical threat data. Configuring the Connector for DefenseStorm To configure Lucidum to ingest data from DefenseStorm: Log...
Datto Remote Monitoring and Management (RMM)
Last Updated: July 13, 2024Datto Remote Monitoring and Management (RMM) is a secure cloud-based RMM platform. Managed service providers can remotely secure, monitor, and manage endpoints with Datto RMM. Configuring the Connector for Datto RMM To configure Lucidum to ingest data from Datto RMM: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until...
Datadog
Last Updated: July 8, 2024Datadog allows observability for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. Lucidum uses the Datadog connector to ingest data from Datadog. Requirements To use the Datadog connector in Lucidum: Before configuring the Datadog connector in Lucidum, you must first define credentials for Lucidum in the Datadog API....
Darktrace PREVENT
Last Updated: July 17, 2024Darktrace PREVENT (previously Enterprise Immune System) provides continuous monitoring of your attack surface for risks, high-impact vulnerabilities and external threats and actionable insights. Configuring the Connector for Darktrace Enterprise Immune System To configure Lucidum to ingest data from Darktrace Enterprise Immune System : Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add...
Cymulate
Last Updated: July 9, 2024Cymulate Breach and Attack Simulation (BAS) test cybersecurity controls by safely conducting threat activities, tactics, techniques, and procedures in production environments. Cymulate BAS validates security controls against emergent threat activity, confirms remediation, and prepares for audits and penetration tests. Configuring the Connector for Cymulate To configure Lucidum to ingest data from Cymulate: Log in to...
CylancePROTECT
Last Updated: July 9, 2024CylancePROTECT is an advanced threat protection program that utilizes machine learning and artificial intelligence to categorize files and running processes. Files deemed ‘unsafe’ or ‘abnormal’ are quarantined, while memory exploit attempts are blocked. Configuring the Connector for CylancePROTECT To configure Lucidum to ingest data from CylancePROTECT: Log in to Lucidum. In the left pane, click Connector....
Cybereason EDR
Last Updated: June 28, 2024Cybereason EDR detects and responds to advanced attacks. The detection capabilities analyze collected data, classify events that occur on endpoints, and apply proprietary detection rules to identify threats. The response capabilities consolidate intelligence about an attack into a single visual representation that provides a complete timeline of the attack, the flow of malware across processes...
CyberCNS
Last Updated: July 8, 2024What is CyberCNS? CyberCNS is a Vulnerability Management Solution that is purpose-built for Managed Security Service Providers (MSSP). Why Should You Use the CyberCNS Connector? The CyberCNS connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies find vulnerabilities quickly and remediate...
CyberArk Endpoint Privilege Manager (EPM)
Last Updated: October 22, 2025What is CyberArk Endpoint Privilege Manager (EPM)? CyberArk Endpoint Privilege Manager (EPM) enforces least privilege and enables organizations to block and contain attacks on endpoint computers. CyberArk reduces the risk of information being stolen or encrypted and held for ransom. CyberArk uses a combination of privilege security, application control, and credential protection to reduce the...
CSCDomainManager
Last Updated: July 17, 2024CSCDomainManager is a domain management tool that secures and manages your domain portfolio, DNS, and digital certificates. CSCDomainManager provides rules-based technology, customizable reporting, and granular user management. Configuring the Connector for CSCDomainManager To configure Lucidum to ingest data from CSCDomainManager: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until...
CrowdStrike Falcon LogScale
Last Updated: June 28, 2024What is Falcon LogScale? CrowdStrike Falcon LogScale is a SIEM and log management solution. Falcon LogScale provides an aggregated view of all relevant network security data sources to explore and manage ever increasing threats and vulnerabilities within one cost effective platform with an easy and intuitive search language. Why Should You Use the Falcon LogScale...
CrowdStrike Falcon Endpoint Protection Platform
Last Updated: January 27, 2026CrowdStrike Falcon Endpoint Protection Platform is a cloud-based platform that protects laptops, desktops, and servers from breaches. Requirements To use the CrowdStrike Connector in Lucidum: Before configuring the CrowdStrike connector in Lucidum, you must first define credentials for Lucidum in the CrowdStrike API. You can then configure the CrowdStrike connector in Lucidum and start ingesting data from CrowdStrike...
ConnectWise Automate
Last Updated: July 17, 2024ConnectWise Automate is a remote monitoring and management (RMM) solution that provides access and control over agent and agentless devices across your network. You can remotely access endpoint devices, either manually or automatically using out-of-the-box scripts. Automated tasks include patching, remote monitoring, automated remediation, asset discovery, and administrative tasks such as emailing scheduled reports, generating...
Connectors FAQs
Last Updated: July 23, 2025How does a Lucidum connector access data sources and consume the data? Answer: Lucidum uses the data source’s API library or REST API requests to retrieve data. How does a connector authenticate with the data source? Answer: Lucidum authenticates with some data sources using username and password; API key and API secret; or client id...
ColorTokens Xshield
Last Updated: June 28, 2024ColorTokens Xshield is a cloud-delivered solution that provides workload visibility, automated and dynamic policy enforcement, and the ability to control any communications to or from the workload instances. Configuring the Connector for Xshield To configure Lucidum to ingest data from Xshield: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
Cohesity
Last Updated: June 28, 2024Cohesity Data Cloud is a unified cloud data management platform for securing, managing, and extracting value from your data. Configuring the Connector for Cohesity To configure Lucidum to ingest data from Cohesity: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure....
Code42 Incydr
Last Updated: July 8, 2024What is Code42 Incydr? Code42 Incydr (formerly Code42) is a DLP solution that discovers and stops data leaks and data theft in one platform, eliminating the need for multiple solutions. Why Should You Use the Code42 Incydr Connector? The Code42 Incydr connector provides visibility into the assets and users managed by Code42 Incydr. You can...
CoalfireOne
Last Updated: June 28, 2024CoalfireOne is a SaaS-based platform for compliance management. The CoalfireOne platform provides PCI Approved Scanning Vendor (ASV) services featuring internal and external scans and includes tools to assist with financial compliance and assessment processes, PCI DSS self-assessment tools and questionnaires, project management tools, and document management and reporting tools. Configuring the Connector in Lucidum Log...
Cloudflare
Last Updated: September 12, 2025Cloudflare is a content delivery network and DDoS mitigation product. Cloudflare acts as a reverse proxy between a website and the hosting provider. Lucidum uses the Cloudflare connector to ingest data from Cloudflare services Requirements To use the Cloudflare Connector in Lucidum: Before configuring the Cloudflare connector in Lucidum, you must first define an API token in...
CloudConnexa
Last Updated: July 8, 2024CloudConnexa (formerly OpenVPN Cloud) is a cloud-delivered VPN service that integrates virtual networking and critical security functions in a secure overlay network. Cloud Connexa connects applications, private networks, workforce, and IoT devices. Parameters URL (required): The URL of the CloudConnexa API. For example, https://OpenVPNID.api.openvpn.com. Client ID (required): CloudConnexa API client ID. To obtain the Client ID...
Claroty
Last Updated: April 20, 2026What is Claroty xDome? Claroty xDome is a modular, SaaS-powered industrial cybersecurity platform that scales to protect your environment and powers security teams to prioritize risk reduction based on potential impact to business outcomes. xDome includes asset discovery, asset management, exposure management, network protection, and threat detection. Why Should You Use the Claroty xDome Connector?...
Cisco Vulnerability Management
Last Updated: June 28, 2024Cisco Vulnerability Management (formerly Kenna.VM) is a scalable SaaS solution that leverages real-world exploit data and predictive modeling to provide a real risk score of each vulnerability, helping security teams better prioritize their remediation strategies. Configuring the Connector for Cisco Vulnerability Management To configure Lucidum to ingest data from Cisco Vulnerability Management: Log in to...
Cisco Umbrella
Last Updated: July 8, 2024What is Cisco Umbrella Cisco Umbrella is a cloud-delivered firewall that functions at the DNS layer and provides visibility and control for internet traffic across all ports and protocols. Why Should You Use the Cisco Umbrella Connector? The Cisco Umbrella connector provides visibility into the assets in your environment. You can use this visibility to:...
Cisco TACACS
Last Updated: June 28, 2024Cisco TACACS (Terminal Access Controller Access Control System) is a security application that provides centralized validation of users attempting to gain access to a router or network access server. Enabling the Web Interface for the Access Control System Before configuring the Cisco TACACS connector in Lucidum, you must first enable the web interface for the...
Cisco Secure Endpoint
Last Updated: May 29, 2026What is Cisco Secure Endpoint? Cisco Secure Endpoint (formerly Cisco Advanced Malware Protection (AMP)) prevents, detects, and removes threats from computer systems. Threats can take the form of software viruses and other malware such as ransomware, worms, Trojans, spyware, adware, and fileless malware. Why Should You Use the Cisco Secure Endpoint Connector? The Cisco Secure...
Cisco Meraki
Last Updated: April 24, 2025Cisco Meraki provides cloud-controlled management of wifi, routing, and switching. Cisco Meraki includes centralized management, layer 7 device and application visibility, real-time web-based diagnostics, monitoring, and reporting. Creating an API Key for Cisco Meraki Before configuring the Cisco Meraki connector in Lucidum, you must first create an API Key. Lucidum will use the API key...
Cisco Identity Services Engine (ISE)
Last Updated: June 28, 2024Cisco Identity Services Engine (ISE) is an identity-based network access control and policy enforcement system. Cisco ISE functions as a common policy engine that provides access controls and network device administration for enterprises. Parameters Host (required) – The hostname or IP address of the Cisco ISE server. Port (required) – Use 443 or 9060 by default. User Name and Password (required) – The credentials for a...
CIS-CAT Pro
Last Updated: June 28, 2024CIS-CAT Pro Assessor evaluates the security posture of systems against recommended policy settings from CIS Benchmarks and generates compliance reports. CIS-CAT Pro Assessor also provides vulnerability scanning for missed system patches. Configuring the Connector for CIS-CAT Pro To configure Lucidum to ingest data from CIS-CAT Pro: Log in to Lucidum. In the left pane, click Connector....
Chorus
Last Updated: June 28, 2024Chorus captures and analyzes all customer calls, meetings, and emails to create visibility, drive process and behavior changes, and deliver bottom line impact. Parameters URL (required): The URL of the Chorus API, for example, https://chorus.ai API Token (required): The Chorus API token Verify SSL (optional, default is false): Verify the SSL certificate or not API API...
Cherwell Service Management
Last Updated: June 28, 2024Cherwell Service Management (CSM) helps teams implement, automate, and upgrade service processes and support processes. CSM includes the Cherwell Core platform and OOTB content that provides predefined functionality and designs. Configuring the Connector for Cherwell Service Management To configure Lucidum to ingest data from Cherwell Service Management: Log in to Lucidum. In the left pane,...
Chef
Last Updated: June 28, 2024Chef is a suite of automation tools for enterprise infrastructure, applications, and DevSecOps. Chef creates automations for application delivery, infrastructure configuration, and compliance auditing. Configuring the Connector for Chef To configure Lucidum to ingest data from Chef: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
Checkmarx SAST (CxSAST)
Last Updated: June 28, 2024Checkmarx SAST is a source code analysis solution that identifies, tracks, and repairs technical and logical flaws in source code, such as security vulnerabilities, compliance issues, and business logic problems. Parameters Host (required): The hostname or IP address of the Checkmarx SAST server Client Id and Secret (required) – The Checkmarx SAST server client id and secret. Verify...
Check Point Infinity
Last Updated: June 28, 2024Check Point Infinity is a cyber security architecture that prevents attacks across networks, cloud deployments, endpoints, mobile, and IoT devices. Configuring the Connector for Check Point Infinity To configure Lucidum to ingest data from Check Point Infinity: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
Check Point Harmony Endpoint
Last Updated: June 28, 2024Check Point Harmony Endpoint is a consolidated endpoint security solution with advanced EPP, EDR, and XDR capabilities. Check Point Harmony Endpoint manages threat prevention, data protection, media encryption and port protection, firewalls, developer protection, and software deployment. Configuring the Connector for Check Point Harmony Endpoint To configure Lucidum to ingest data from Check Point Harmony...
Check Point CloudGuard
Last Updated: June 28, 2024Check Point CloudGuard offers unified, cloud-native security for cloud assets (applications, workloads, and networks). Check Point CloudGuard automates security, prevent threats, and manages security posture. Configuring the Connector for Check Point CloudGuard To configure Lucidum to ingest data from Check Point CloudGuard: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector....
ChangeGear
Last Updated: June 28, 2024ChangeGear is an ITSM (IT service management) platform that tracks, manages, and controls Information Technology services and automates change management processes across the enterprise. Configuring the Connector for ChangeGear To configure Lucidum to ingest data from ChangeGear: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
CFEngine
Last Updated: June 28, 2024CFEngine is a general purpose automation solution that can build servers, deploy and patch software, and manage configuration tasks like scheduling, local user-management, process-management, security hardening, inventory and compliance management. Configuring the Connector for CFEngine To configure Lucidum to ingest data from CFEngine: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add...
Dayforce
Last Updated: March 16, 2026What is Dayforce? Dayforce (formerly Ceridian) is cloud-based, human capital management (HCM) platform that manages payroll, HR, benefits, workforce, and talent. Why Should You Use the Dayforce Connector? The Dayforce connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies find vulnerabilities...
Centrify Identity Services
Last Updated: June 28, 2024Centrify Identity Services is a platform for managing application access, endpoints, and network infrastructure. Centrify Identity Services also provides adaptive analytics, auditing of user activity, and built-in and custom reports. Configuring the Connector for Centrify Identity Services To configure Lucidum to ingest data from Centrify Identity Services: Log in to Lucidum. In the left pane,...
Censys
Last Updated: June 28, 2024Censys Attack Surface Management delivers continuous, automated scanning and accurate attribution of internet-based assets and provides visibility into both your known and unknown assets, covering everything from HTTP hosts to Kubernetes clusters. Configuring the Connector for Censys To configure Lucidum to ingest data from Censys: Log in to Lucidum. In the left pane, click Connector. In...
Cato SASE
Last Updated: June 28, 2024SASE (Secure Access Service Edge) by Cato Networks is a cloud-native, enterprise networking and security product. SASE converges SD-WAN and Security Service Edge (SSE) functions, including FWaaS, CASB, DLP, SWG, and ZTNA, into a unified, cloud-native service. SASE provides a single cloud-based network that connects and secures any physical, cloud, or mobile enterprise resource, in any location. Configuring...
Canonical Ubuntu Landscape
Last Updated: June 28, 2024Canonical Ubuntu Landscape automates security patching, auditing, access management, and compliance tasks across the Ubuntu estate. Landscape supports networked and air-gapped environments. Configuring the Connector for Landscape To configure Lucidum to ingest data from Landscape: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you...
CA Spectrum
Last Updated: June 28, 2024CA Spectrum is a single platform that features proactive network change management, fault isolation and root cause analysis. With CA Spectrum, you can track, manage and optimize not only the network infrastructure but the business services running on top of it. Configuring the Connector for CA Spectrum To configure Lucidum to ingest data from CA...
CA Service Management
Last Updated: June 28, 2024CA Service Management is an enterprise class IT service management (ITSM) solution. The solution includes a service desk, modern self-service, a service catalog, and IT asset management capabilities to manage and gain insights into hardware and software asset allocations and licenses. Configuring the Connector for CA Service Management To configure Lucidum to ingest data from CA...
Burp Suite
Last Updated: June 28, 2024Burp Suite is a platform for security testing of web applications that supports the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. Configuring the Connector for Burp Suite To configure Lucidum to ingest data from Burp Suite: Log in to Lucidum. In the...
Buildkite
Last Updated: June 28, 2024Buildkite is a platform for running secure and scalable continuous integration pipelines on your own infrastructure. Configuring the Connector for Buildkite To configure Lucidum to ingest data from Buildkite: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears....
Broadcom Symantec ProxySG
Last Updated: July 9, 2024Broadcom Symantec ProxySG (previousy Blue Coat ProxySG) is a secure web gateway that inspects content to identify malicious payloads and then filter, strip, block, or replace web content to mitigate risks and prevent data loss (DLP). Configuring the Connector for Symantec ProxySG To configure Lucidum to ingest data from Symantec ProxySG: Log in to Lucidum....
Box
Last Updated: September 11, 2025What is the Box Platform? Box Platform is a cloud-based content management system for managing, sharing, and collaborating on digital files. Box Platform provides security, analytics, and other features related to files and information. Box Platform also includes add-ons for different industries and situations. Why Should You Use the Box Connector? The Box connector provides...
BMC TrueSight Server Automation
Last Updated: July 9, 2024BMC TrueSight Server Automation manages security vulnerabilities and provisions, configures, patches, and secures physical, virtual, and cloud servers. Configuring the Connector for BMC TrueSight Server Automation To configure Lucidum to ingest data from BMC TrueSight Server Automation: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
BMC TrueSight Presentation Server
Last Updated: July 9, 2024The BMC TrueSight Presentation Server provides a web-based console and consumes data from various TrueSight products to provide a consolidated set of views for monitoring the infrastructure, real and synthetic applications, and capacity planning. The TrueSight Presentation Server also provides role-based access control and data management. To configure Lucidum to ingest data from : Log in to...
BMC Helix Discovery
Last Updated: July 9, 2024BMC Helix Discovery (formerly BMC Atrium Discovery and Dependency Mapping) is a SaaS-based, cloud-native discovery and dependency tool that automatically discovers physical and virtual IT assets and applications across multi-cloud, hybrid, and on-premises environments and maps the relationships between them. Configuring the Connector for BMC Helix Discovery To configure Lucidum to ingest data from BMC...
BMC Helix CMDB
Last Updated: July 13, 2024BMC Helix CMDB (previously BMC Atrium CMDB) is a configuration management database (CMDB) that consolidates disparate sources of data into a single view of infrastructure components (hardware, software, and cloud services), their physical and logical relationships, and their relationships to business services. Configuring the Connector for BMC Helix CMDB To configure Lucidum to ingest data...
BlueCat Enterprise DNS
Last Updated: July 9, 2024BlueCat Enterprise DNS (includes BlueCat DNS Integrity and BlueCat DNS Edge) centralizes and automates DNS services and leverages DNS data for control, compliance and security. Parameters Host (required) – The URL of the BlueCat management server. For example, http://<AddressManager_IP> User Name and Password (required) – Specify valid username and password: The user account can be created by accessing the “Administration” and...
Block 64 BlockBox
Last Updated: July 9, 2024Block 64 BlockBox is an asset management solution that is agentless and runs on an on-premises server or an on-premises virtual machine. Block 64 BlockBox discovers all assets, retrieves data about those assets, and provides analytics about the discovered assets. Configuring the Connector for Block 64 BlockBox To configure Lucidum to ingest data from Block...
BlackBerry Unified Endpoint Management (UEM)
Last Updated: July 12, 2024BlackBerry Unified Endpoint Management (UEM) is an endpoint management solution that provides comprehensive device, app, and content management with integrated security and connectivity, and helps you manage iOS, macOS, Android, and Windows 10 devices for your organization. Configuring the Connector for BlackBerry UEM To configure Lucidum to ingest data from BlackBerry UEM: Log in to Lucidum. In the...
BitSight Security Performance Management
Last Updated: May 28, 2026What is BitSight Security Performance Management? BitSight Security Performance Management provides a dynamic Security Rating for the cybersecurity in your organization. To derive a Security Rating, BitSight Security Performance Management continuously assesses security controls and the remediation of gaps to help organizations meet internal standards and external regulations. Why Should You Use the BitSight Security...
bitFit
Last Updated: July 9, 2024bitFit is an IT Asset Management (ITAM) solution that provides conventional asset management, additional stockroom and marketplace features, and a CMDB. Configuring the Connector for bitFit To configure Lucidum to ingest data from bitFit: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want...
Bitdefender GravityZone
Last Updated: July 9, 2024Bitdefender GravityZone Business Security is a cybersecurity package designed for small-to-medium companies that provides protection against all types of malware, including ransomware, phishing, zero-day attack, viruses, and spyware. Bitdefender GravityZone Business Security also discovers risky software and bad configurations on endpoints. Configuring the Connector for Bitdefender GravityZone Business Security To configure Lucidum to ingest data from...
Bitbucket
Last Updated: July 9, 2024Bitbucket Cloud is a Git-based code hosting and collaboration tool, built for teams. Bitbucket’s best-in-class Jira and Trello integrations are designed to bring the entire software team together to execute on a project. Configuring the Connector for Bitbucket To configure Lucidum to ingest data from Bitbucket: Log in to Lucidum. In the left pane, click Connector....
Bionic
Last Updated: July 9, 2024Bionic is an Application Security Posture Management (ASPM) platform that creates an inventory of applications, services, message brokers, and databases, detects critical risks in the application layer and code, and provides automated policies and notifications to aid remediation. Configuring the Connector for Bionic To configure Lucidum to ingest data from Bionic: Log in to Lucidum....
BigTime Projector
Last Updated: July 9, 2024BigTime Projector (formerly Projector PSA) is a Professional Services Automation Software (PSA) solution. BigTime Projector provides time and expense management, project budgeting, invoicing, multi-currency accounting, sub-contractor management, rate and revenue management, revenue recognition, vendor management, financial reporting, and general ledger integration. Parameters URL (required): The URL of the BigTime Projector API Username and Password (required): BigTime Projector...
BigID
Last Updated: July 17, 2024BigID provides data management and data security. BigID discovers and classifies data, enforces privacy policies and compliance, and manages data risk and data security. Configuring the Connector for BigID To configure Lucidum to ingest data from BigID: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the...
BeyondTrust Privileged Identity
Last Updated: July 9, 2024BeyondTrust Privileged Identity is a password management solution that improves security and compliance. BeyondTrust Privileged Identity discovers, manages, and rotates passwords for privileged accounts. Configuring the Connector for BeyondTrust Privileged Identity To configure Lucidum to ingest data from BeyondTrust Privileged Identity: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
BeyondTrust Privilege Management for Windows
Last Updated: July 9, 2024BeyondTrust Privilege Management for Windows combines privilege management and application control technology in a single agent. BeyondTrust Privilege Management for Windows allows organizations to eliminate admin rights across the entire business. BeyondTrust Privilege Management includes reporting, endpoint analysis, dashboards, and trend data for auditing and compliance. Configuring the Connector for BeyondTrust Privilege Management To configure...
BeyondTrust Password Safe
Last Updated: July 9, 2024BeyondTrust Password Safe is a dedicated, all-in-one credential, secrets, and session management solution built to unify privileged password management. Configuring the Connector for BeyondTrust Password Safe To configure Lucidum to ingest data from BeyondTrust Password Safe: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector...
BeyondTrust Endpoint Privilege Management
Last Updated: July 9, 2024What is BeyondTrust Endpoint Privilege Management? BeyondTrust Endpoint Privilege Management elevates privileges as needed to known, trusted applications, controls application usage, and logs and reports on privileged activities. BeyondTrust Endpoint Privilege Management implements zero trust endpoint security controls. Why Should You Use the BeyondTrust Endpoint Privilege Management Connector? The BeyondTrust Endpoint Privilege Management connector provides...
BeyondTrust BeyondInsight
Last Updated: July 9, 2024BeyondInsight by BeyondTrust is a Privileged Access Management (PAM) reporting platform that provides centralized discovery, management, auditing, reporting, and analytics for visibility and control over privileged access activity. Configuring the Connector for BeyondInsight To configure Lucidum to ingest data from BeyondInsight: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
Barracuda CloudGen Access
Last Updated: July 9, 2024Barracuda CloudGen Access is a Zero Trust Access solution that provides secure access to applications and data from any device and location and continuously verifies that access requests. Configuring the Connector for Barracuda CloudGen Access To configure Lucidum to ingest data from Barracuda CloudGen Access: Log in to Lucidum. In the left pane, click Connector. In...
Baramundi
Last Updated: July 9, 2024The Baramundi Management Suite centrally manages devices via LAN or Internet. Using Internet-Enabled Endpoint Management, the baramundi Management Suite distributes necessary updates to smartphones, tablets, and notebooks. Configuring the Connector for Baramundi To configure Lucidum to ingest data from Baramundi Management Suite: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector....
BambooHR
Last Updated: July 9, 2024BambooHR is an HR platform that tracks job applicants, provides proactive onboarding tasks, manages and analyzes employee data, manages payroll and benefits, and measures employee experience and performance. Configuring the Connector for BambooHR To configure Lucidum to ingest data from BambooHR: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll...
AWS
Last Updated: June 1, 2026AWS (Amazon Web Services) is a comprehensive, evolving cloud computing platform provided by Amazon that includes a mixture of infrastructure as a service (IaaS), platform as a service (PaaS) and packaged software as a service (SaaS) offerings. Meridian uses the AWS connector to ingest data from the following AWS services: AWS Config AWS Database Services...
Aviatrix Enterprise Platform
Last Updated: July 17, 2024The Aviatrix Enterprise Platform includes the Aviatrix VPN Client. The Aviatrix VPN Client provides a seamless experience when authenticating a VPN user through a SAML IDP. This connector ingests data about the VPN and its users. Configuring the Connector for Aviatrix VPN To configure Lucidum to ingest data from Aviatrix VPN: Log in to Lucidum....
Auvik
Last Updated: July 9, 2024Auvik is a cloud-based network monitoring and network management solution. Auvik provides network inventory, network mapping, traffic mapping, automations, and automatic backup and restore of configurations. Configuring the Connector for Auvik To configure Lucidum to ingest data from Auvik: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you...
Automox
Last Updated: June 3, 2026What is Automox? Automox is a cloud-based patch management platform that automates the scanning, updating, and inventorying of devices. Automox works across Windows, macOS, Linux, and third-party software, including Adobe, Java, Firefox, Chrome, and Windows. Why Should You Use the Automox Connector? The Automox connector provides visibility into the assets and users in your environment....
Attivo BOTsink
Last Updated: July 9, 2024Attivo BOTsink server is a deception and response platform. BOTsink uses deception techniques and a matrix of distributed decoy systems to turn an entire network into a trap. When an attacker engages, BOTsink generates alerts and visual maps, quarantines the infected device, and then analyzes the attack movement, methods, and actions. Configuring the Connector for...
Atlas Data Center
Last Updated: July 9, 2024Atlas Data Center Solutions offers a broad portfolio of products, including cards, servers, and clusters, to provide superb computing power and ultimate energy efficiency, meeting the requirements of cloud computing. Configuring the Connector for Atlas Data Center Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you...
Aternity
Last Updated: July 9, 2024Aternity is a Digital Experience Management platform that monitors the performance and health of applications and devices via an agent on desktops, laptops, smartphones, tablets, or virtual desktops. Aternity also includes analytics, dashboards, and automations for self-healing. Configuring the Connector for Aternity To configure Lucidum to ingest data from Aternity: Log in to Lucidum. In...
Atera
Last Updated: January 8, 2026What is Atera? Atera is a cloud-based, AI-powered, IT management platform, which includes remote monitoring and management (RMM), IT automations, patch management, scripting, ticketing, reporting, and dozens of integrations. Why Should You Use the Atera Connector? The Atera connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets...
Asset Panda
Last Updated: July 9, 2024Asset Panda is a cloud-based platform for asset lifecycle management that inventories and manages assets and create interdependencies between them. The Asset Panda suite of integrations creates a single source of truth for asset estates and detailed reporting and interactive dashboards monitor and optimize the lifecycle of assets. Configuring the Connector for Asset Panda To...
Asana
Last Updated: July 9, 2024Asana is a work management tool designed to help individuals and teams collaborate, keep track of tasks, delegate responsibilities, monitor progress, and communicate in real-time. Configuring the Connector for Asana To configure Lucidum to ingest data from Asana: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find...
Aruba Central
Last Updated: July 9, 2024What is Aruba Central? Aruba Central is a cloud-native management console for all Aruba network infrastructure. As the single point of visibility and control for Aruba ESP (Edge Services Platform), Aruba Central delivers AIOps, workflow automation, and advanced security features across campus, branch, data center, and remote work environments. Why Should You Use the Connector?...
Arista NDR
Last Updated: July 9, 2024Arista NDR (formerly Awake Security) is a network detection and response solution. Arista NDR monitors network packets, users, devices, and applications for threats, risk, and malicious intent. Configuring the Connector for Arista NDR To configure Lucidum to ingest data from Arista NDR: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector....
Archer Integrated Risk Management
Last Updated: July 9, 2024Archer Integrated Risk Management (formerly RSA Archer) is a platform that supports business-level management of risk and compliance programs across IT, finance, operations, and legal domains. Parameters URL (required): The URL of the Archer Integrated Risk Management API Username and Password (required): Archer Integrated Risk Management username and password Instance Name (required): The Archer instance name. Verify SSL (optional,...
Aqua
Last Updated: July 12, 2024The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure, and secure running workloads wherever they are deployed. Configuring the Connector for Aqua Platform To configure Lucidum to ingest data from Aqua Platform: Log in to Lucidum. In the left pane,...
Appgate Software Defined Perimeter (SDP)
Last Updated: July 12, 2024Appgate Software Defined Perimeter (SDP) uses a unified policy engine and builds individual, just-in-time, session-based “micro” firewalls or 1-1 connections between users and the resources they are authorized to access. Parameters Host (required): The hostname or IP address of the Appgate SDP server Port (optional): The port of the Appgate SDP server, default value is 8443 Username...
AlertSite
Last Updated: July 9, 2024What is AlertSite? SmartBear AlertSite is a web monitoring tool that monitors the performance of websites, web applications, APIs, email servers, and other resources. AlertSite monitors at the browser level, collecting metrics that reflect the user’s experience. Why Should You Use the AlertSite Connector? The AlertSite connector provides visibility into the assets in your environment....
Alert Logic Cloud Insight
Last Updated: July 9, 2024Alert Logic Cloud Insight is an Amazon Web Services (AWS)-native security service that continually scans your AWS environments for exposures in your AWS assets and in the underlying AWS account. As your environment changes, Cloud Insight automatically detects these changes and scans new or modified assets for exposures. Parameters URL (required): The URL of the Alert...
Alcide
Last Updated: July 9, 2024Alcide Data Center and Cloud Ops Security Platform secures the cloud infrastructure, workloads, and service mesh against cyber attacks. Alcide protects container, serverless, VM, and bare metal data centers. Alcide provides discovery, visibility, threat protection, and anomaly detection and enforces security policies. Configuring the Connector for Alcide To configure Lucidum to ingest data from Alcide:...
Alcatel-Lucent OmniVista 2500
Last Updated: July 9, 2024The Alcatel-Lucent OmniVista 2500 is a network management system (NMS) for data centers and converged campus networks that includes infrastructure and device configuration, monitoring, backup, scheduling, security, alerts, quarantine, troubleshooting, and downtime resolution. Parameters URL (required): The URL of the OmniVista 2500 NMS API Username and Password (required): OmniVista 2500 NMS username and password Verify SSL (optional, default...
Airtable
Last Updated: July 9, 2024Airtable is a low-code platform for building collaborative apps. Airtable includes an interface design tool, charts, automations, and reporting. Configuring the Connector for Airtable To configure Lucidum to ingest data from Airtable: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure....
Airlock
Last Updated: July 9, 2024Airlock creates and manages secure allowlists (formerly application whitelists) in dynamically changing computing environments. Configuring the Connector for Airlock To configure Lucidum to ingest data from Airlock: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears. In the Settings page,...
Aha!
Last Updated: July 9, 2024Aha! manages the software development lifecycle with roadmaps, analytics, whiteboards, collaboration tools, workload management, and reporting. Configuring the Connector for Aha! To configure Lucidum to ingest data from Aha!: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears....
ADP
Last Updated: September 12, 2024What is ADP? ADP provides cloud-based human capital management (HCM) solutions that unite HR, payroll, talent, time, tax, and benefits administration. Why Should You Use the ADP Connector? The ADP connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships...
Adobe Workfront
Last Updated: July 9, 2024Adobe Workfront is a web-based work management and project management tool that includes enterprise work management, issue tracking, document management, time tracking and portfolio management. Configuring the Connector for Adobe Workfront To configure Lucidum to ingest data from Adobe Workfront: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until...
Adobe
Last Updated: July 9, 2024Adobe provides digital media, digital experience, and digital marketing and advertising solutions. Popular products include Photoshop, Acrobat, and Adobe Creative Cloud. Parameters URL (required): The URL of the Adobe API, for example, https://lucidum.adobe.com. Organization ID (required): The service account (JWT) organization ID. Technical account ID (required): The service account (JWT) technical account ID. Client ID (required): The...
Admin By Request
Last Updated: January 7, 2026What is Admin By Request? Admin By Request is a security solution for the control and management of local administrative rights on desktops and servers. Why Should You Use the Admin By Request Connector? The Admin By Request connector provides visibility into the users and permissions in your environment. You can use this visibility to:...
Addigy
Last Updated: March 9, 2026What is Addigy? Addigy is a cloud-based, multi-tenant mobile device management solution that manages macOS, iOS, iPadOS, and iOS devices. Why Should You Use the Addigy Connector? The Addigy connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between...
Adaptive Shield
Last Updated: July 9, 2024Adaptive Shield is a SaaS Security Posture Management (SSPM) platform that identifies SaaS misconfigurations and provides visibility to all SaaS apps and devices connected to your core SaaS stack. Configuring the Connector for Adaptive Shield To configure Lucidum to ingest data from Adaptive Shield: Log in to Lucidum. In the left pane, click Connector. In the Connector page,...
Abnormal Security
Last Updated: June 1, 2026What is Abnormal Security? Abnormal provides cloud-native, AI-powered protection against email attacks including phishing, malware, ransomware, social engineering, executive impersonation, supply chain compromise, internal account compromise, spam, and graymail. Why Should You Use the Abnormal Security Connector? The Abnormal Security connector provides visibility into the threats and assets in your environment. You can use this...
1E Tachyon
Last Updated: July 18, 2024What is 1E Tachyon? Tachyon is a systems management tool that allows you to investigate, remediate issues, and manage operations across all your endpoints in real time. Why Should You Use the 1E Tachyon Connector? The 1E Tachyon connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets...
VMware vRealize
Last Updated: July 17, 2024What is VMware vRealize Suite? VMware vRealize Suite and vCloud Suite deliver a self-service consumption layer, an automation framework, and self-driving Day 2 operations for VMware Cloud and beyond. Why Should You Use the VMware vRealize Suite Connector? The VMware vRealize Suite connector provides visibility into the assets in your environment. You can use this...
VMware vRealize Automation SaltStack Config
Last Updated: July 9, 2024VMware vRealize Automation SaltStack Config is an automated configuration management platform that provisions, configures, deploys, manages, and monitors nodes to ensure that the nodes are operating in a consistent, desired state. SaltStack Config uses automation to manages environments at any scale. Parameters URL (required): The URL of the vRealize Automation SaltStack Config API, for example, https://saltstack.company.com....
Vulcan Cyber
Last Updated: July 9, 2024Vulcan Cyber manages the full vulnerability risk lifecycle for all IT assets and cyber surfaces including application, cloud, and traditional infrastructure environments. Vulcan Cyber analyzes, contextualizes, prioritizes, and manages all vulnerability and risk data while efficiently orchestrating remediation campaigns. Creating an API Token for Vulcan Cyber Before configuring the Vulcan Cyber connector in Lucidum, you...
Wasp AssetCloud
Last Updated: June 29, 2024Wasp AssetCloud delivers full life-cycle asset management, streamlined auditing, and loss prevention. Configuring the Connector for AssetCloud To configure Lucidum to ingest data from AssetCloud: Log in to Lucidum. In the left pane, click Connector. In the Connector page, click Add Connector. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears. In the Settings page, enter the...
Wazuh
Last Updated: June 29, 2024What is Wazuh Security Monitoring Solution? Wazuh Security Monitoring Solution includes an endpoint security agent (provides XDR capabilities) that is deployed to the monitored systems and a server that collects and analyzes data gathered by the agents (provides SIEM capabilities). Why Should You Use the Wazuh Security Monitoring Solution Connector? The Wazuh Security Monitoring Solution...
WhatsUp Gold
Last Updated: June 29, 2024WhatsUp Gold is a network monitoring solution that combines monitoring, alerting, notification, and policy mechanisms to keep network infrastructure, services, and applications running smoothly and stakeholders informed whenever issues arise. Configuring the Connector for WhatsUp Gold To configure Lucidum to ingest data from WhatsUp Gold: Log in to Lucidum. In the left pane, click Connector. In...
WithSecure Elements Endpoint Protection
Last Updated: June 29, 2024WithSecure Elements Endpoint Protection (formerly F-Secure Protection Service for Business) is a cloud-native, AI-powered endpoint protection solution that monitors and manages all devices, from computers and servers to mobiles, and includes fully integrated patch management capabilities, layered protection, and advanced behavior and empirical analysis. Configuring the Connector for WithSecure Elements Endpoint Protection To configure Lucidum...
Wiz
Last Updated: May 12, 2025What is Wiz? Wiz analyzes all layers of the cloud stack to identify high-risk attack vectors to be prioritized and remediated. Why Should You Use the Wiz Connector? The Wiz connector provides visibility into the assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships...
Workday
Last Updated: February 12, 2025What is Workday? Workday provides enterprise cloud applications for finance and human resources. Workday includes applications for financial management, human resources, planning, spend management, and analytics. Why Should You Use the Workday Connector? The Workday connector provides visibility into the users in your environment. You can use this visibility to: ensure users are managed per...
Imprivata Privileged Access Management
Last Updated: February 10, 2026What is Imprivata Privileged Access Management? Imprivata Privileged Access Management is an agentless solution that provides a secured database to manage privileged accounts and secrets, establishes secure sessions for users through a standard web browser and automates the execution of jobs or tasks without disclosing or sharing access. Why Should You Use the Imprivata Privileged...
Zabbix
Last Updated: June 29, 2024Zabbix is an enterprise-class, open source, distributed monitoring solution. Zabbix monitors networks, servers, virtual machines, applications, services, databases, websites, and the cloud. Zabbix includes email based alerts, reporting, and data visualization. Configuring the Connector for Zabbix To configure Lucidum to ingest data from Zabbix: Log in to Lucidum. In the left pane, click Connector. In the Connector page,...
Zenoss Cloud
Last Updated: July 9, 2024Zenoss Cloud is a software-as-a-service (SaaS) infrastructure monitoring platform. Zenoss Cloud builds real-time models of IT infrastructure and services and uses machine learning algorithms to quickly identify the root causes of outages. Configuring the Connector for Zenoss Cloud To configure Lucidum to ingest data from Zenoss Cloud: Log in to Lucidum. In the left pane,...
ZeroFox
Last Updated: June 29, 2024The ZeroFox Platform is an External Attack Surface Management (EASM) solution that continuously discovers, monitors, evaluates, and prioritizes attack vectors for external attack surfaces. The ZeroFox Platform provides a central point of insight, augmenting various aspects of your exposure management program. Parameters URL (required): The URL of the ZeroFox API. Username and Password (required): ZeroFox username and...
Zerto
Last Updated: July 17, 2024Zerto delivers ransomware resilience, disaster recovery, and data mobility with a scalable solution built for virtualized environments running on-premises or in the cloud. Parameters URL (required): The URL of the Zerto API, for example, https://analytics.api.zerto.com. Username and Password (required): Zerto username and password. Verify SSL (optional, default is false): Verify the SSL certificate or not. API Documentation API version...
Zoom
Last Updated: July 9, 2024What is Zoom? Zoom is a remote conferencing service that provides video conferencing, online meetings, chat, and mobile collaboration. Why Should You Use the Zoom Connector? The Zoom connector provides visibility into the users assets in your environment. You can use this visibility to: ensure assets are managed per your security policies derive relationships between...
Zscaler Deception
Last Updated: June 29, 2024Zscaler Deception (formerly Smokescreen IllusionBLACK) is a deception-based threat detection platform delivered as part of the Zscaler Zero Trust Exchange. Zscaler Deception uses decoys/honeypots to detect advanced in-network threats that have bypassed existing defenses. Zscaler Deception detects compromised users, stops lateral movement, and defends against human-operated ransomware, hands-on keyboard threats, supply chain attacks, and malicious...
SecurityScorecard
Last Updated: June 29, 2024SecurityScorecard provides instant cyber risk ratings of vendors and supply chains. SecurityScorecard enables self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting. Parameters URL (required): The URL of the SecurityScorecard API, for example, https://api.securityscorecard.io. API Token (required): SecurityScorecard API token. Verify SSL (optional, default is false): Verify the SSL certificate or not. API Documentation https://securityscorecard.readme.io/reference/introduction
CyCognito
Last Updated: June 28, 2024The CyCognito platform is an attack surface management solution that automatically discovers your organization’s structure and internet-exposed assets, performs continuous, active security testing of all exposed assets, and then provides prescriptive and intelligent remediation guidance. Configuring the Connector for CyCognito To configure Lucidum to ingest data from CyCognito: Log in to Lucidum. In the left...
Citrix Endpoint Management
Last Updated: June 28, 2024Citrix Endpoint Management (formerly XenMobile) is a Unified Endpoint Management (UEM) solution. Citrix Endpoint Management offers a single, uniform, over-the-air management interface for mobile, laptops, PCs, and other devices like wearables and IoT endpoints. Configuring the Connector for Citrix Endpoint Management To configure Lucidum to ingest data from Citrix Endpoint Management: Log in to Lucidum....
Cyware
Last Updated: June 28, 2024Cyware is a threat intelligence platform that collects and analyzes threat data from various sources to identify and prevent threats to an organization’s network. Cyware provides real-time insights and actionable information about emerging cyber threats, vulnerabilities, and malicious activities and fosters active security collaboration through bidirectional threat intelligence sharing. Parameters URL (required): The URL of the...
Managing a Dashboard
Last Updated: November 5, 2025This chapter describes the actions you can perform on a dashboard. Permissions Channels control your permissions. If a dashboard is in a channel where you have read-only privileges, you will have read-only privileges for the member dashboards. If a dashboard is in a channel where you have read-write privileges, you will have read-write privileges for...
Exporting and Importing a Dashboard
Last Updated: November 4, 2025This chapter describes how to export and import dashboards. You can export dashboards to a JSON file or a PDF file. You can import dashboards using a JSON file. Exporting a Dashboard To export a dashboard to JSON or PDF: Log in to your Lucidum system. In the left menu, click Dashboards. In the Channel...
Creating a Dashboard
Last Updated: November 6, 2025Ways to Create a Dashboard There are three ways to create a dashboard: You can create a new dashboard from scratch You can import a JSON file from another Lucidum system. You can also copy a dashboard and then edit the copy. This chapter describes all these options. Creating a New Dashboard To create a...