Illusive Networks

Illusive Networks deceives cyber attackers by planting false information about a given network's resources.

The Illusive Networks adapter connection requires the following parameters:

1. Illusive Domain – The hostname of the Illusive Networks server.
2. API Key – The API key obtained from the Illusive Management Server. For more details, see the section below.
3. Verify SSL – Choose whether to verify the SSL certificate of the server.
4. HTTPS Proxy (optional) – Connect the adapter to a proxy instead of directly connecting it to the domain.

Generating API Key for Illusive REST API Request

To obtain an API key for the Illusive REST API Request:

1. Navigate to Settings > General , API keys pane.
2. Enter values in the following fields:
   • Description - Specify description of key.
   • Permissions - Select the following permissions:
     • All Permissions
     • Create Event Read
     • Monitoring Data
   • Restrict Source IP (optional) - Limit the API key to be used only from the specified source IP address.
3. Click +Add. The API Key is created and added to the list of keys shown.
4. Copy the header containing the key to a text file and save it securely.

Advanced Settings

1. Machine execution status include list (required, default: SUCCESS_RESPONSE, FAILURE_CONNECTION, FAILURE_EXECUTION, SUCCESS_EXECUTION, FAILURE_RESPONSE) - Specify which types of machine execution status to include in the fetch.

2. Use only SUCCESS_RESPONSE responses for last seen (optional, default: false) - Select whether to include only successful pushes to populate the Last Seen field in Axonius.