runZero Network Discovery

What is runZero? #

runZero Network Discovery (formerly Rumble Network Discovery) provides visibility into your external attack surface and internal networks, revealing potential vulnerabilities, insecure configurations, and other risks before they can be exploited.

Why Should You Use the runZero Connector? #

The runZero connector provides visibility into the assets in your environment. You can use this visibility to:

• ensure assets are managed per your security policies

• derive relationships between assets, users, applications, and data

How Does This Connector Work? #

Lucidum executes read-only requests to the runZero REST API and ingests only meta-data about runZero devices. Lucidum does not retrieve any data stored on your assets.

Configuring the Connector in Lucidum #

Source Documentation #

Creating Credentials #

To retrieve data about users, generate an Account API. To do this:

1. Login to the runZero web console as an administrator.

2. Follow the steps in the section on Export API Tokens in https://help.runzero.com/docs/leveraging-the-api/#export-and-organization-apis .

To retrieve all other runZero data, generate an Export API Token. To do this:

1. Login to the runZero web console as an administrator.

2. Follow the steps in the section on Export API Tokens in https://help.runzero.com/docs/leveraging-the-api/#account-api.

API Documentation #

https://help.runzero.com/docs/leveraging-the-api/#account-api

https://app.swaggerhub.com/apis/runZero/runZero/4.0.231027.0

https://help.runzero.com/docs/runzero-api.pdf