Kolide K2

Kolide K2 is a paid cloud-hosted SaaS platform for gathering detailed device information and securing endpoints.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Kolide K2 server.

2. Token (required) - The Kolide K2 API uses token-based authentication to fetch assets. Refer to Kolide K2 API to obtain one.

3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

• Enrich Devices using query - Toggle on to enrich Kolide devices using a custom report that will be fetched from api/v0/reporting/queries/{query_id}.
  • Enrich devices using query ID - Specify the value of the Kolide query ID.
  • Enrich devices query identifier fields - Enter the common field for both the Kolide devices and Kolide query results. For example, the devices and query results both have the serial field, so the adapter will connect them based on the serial field. If the identifier fields have different names (i.e., serial for the devices and serial_number for the query results), the client can enter serial,serial_number and the adapter will make the connection.

APIs

Axonius uses the Kolide K2 API.