Smokescreen IllusionBlack
  • 24 Mar 2022
  • 2 Minutes to read
  • Dark
    Light
  • PDF

Smokescreen IllusionBlack

  • Dark
    Light
  • PDF

Smokescreen uses planted decoys to actively lure and capture attacks on endpoints, networks, and web applications.

Types of Assets Fetched

This adapter fetches the following types of assets:

  • Devices

Parameters

  1. Host Name or IP Address (required) - The hostname or IP address of the Smokescreen IllusionBlack server that Axonius can communicate with via the Required Ports.

  2. API Key (required) - An API Key associated with a user account that has the Required Permissions to fetch assets.

  3. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.

    • When enabled, the SSL certificate offered by the value supplied in Host Name or IP Address is verified against the CA database inside of Axonius. When the SSL certificate can not be validated against the CA database inside Axonius, the connection fails with an error.
    • When disabled, the SSL certificate offered by the value supplied in Host Name or IP Address is not verified against the CA database inside Axonius.
  4. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Host Name or IP Address.

    • When supplied, Axonius uses the proxy when connecting to the value supplied in Host Name or IP Address.
    • When not supplied, Axonius connects directly to the value supplied in Host Name or IP Address.
  5. HTTPS Proxy User Name (optional, default: empty) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

    • When supplied, Axonius authenticates with this value when connecting to the value supplied in HTTPS Proxy.
    • When not supplied, Axonius does not perform authentication when connecting to the value supplied in HTTPS Proxy.
  6. HTTPS Proxy Password (optional, default: empty) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

    • When supplied, Axonius authenticates with this value when connecting to the value supplied in HTTPS Proxy.
    • When not supplied, Axonius does not perform authentication when connecting to the value supplied in HTTPS Proxy.
  7. To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

SmokeScreenIllustionBlack.png


APIs

Axonius uses the IllusionBLACK API.


Required Ports

Axonius must be able to communicate with the value supplied in Host Name or IP Address via the following ports:

  • TCP port 443

Required Permissions

The value supplied in API Key must be associated with credentials that have View Agents / Landmines permissions.

Supported From Version

Supported from Axonius version 4.5


What's Next
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.