HomeLiongardRequest a DemoKnowledge Base
Identity Monitoring

Identity Monitoring

What does this inspector do?

Inspects haveibeenpawned.com for the list of email addresses provided to identify customers that have been part of a known data breach. Next steps will be to include multi-tenancy and auto-discovery of email addresses known to Roar into this inspector

📘

Customer Environment

  • Make sure you have setup a Customer Environment

Adding the Roar Inspector

Navigate to the Client Environment
Choose Add System
Select Identity Monitoring
Under Action > Select Add System

📘

Or if you are an Administrator

  • Navigate to Admin > Inspectors
  • Click Add System
  • Select Identity Monitoring
  • Under Action > Select Add System
  • Select the Environment
  • Friendly Name - We recommend using something like "customer name + Identity Monitoring" as this will make it easily searchable within the UI when in use.
  • Agent - Select the agent to be used for the inspection (this should be the default ROAR-DEDICATED-LINUX)

Email Addresses

You can add email addresses to the field in one of the following ways:
Typing + Pressing Enter for each one
Pasting a comma delimited list of email addresses + Pressing Enter

You can also easily remove email addresses from the inspection by clicking the "x" to remove

📘

Leveraging other Inspectors to get email addresses

Navigate to the Office 365 inspector for the customer of choice
Then to the Users tab
Sort/Filter the list based on active or licensed users
Export the list
Highlight and paste the addresses from that list (Hint: You can insert a column in excel and copy the first email address over and add a "," then under data auto-fill the rest of the column)

Note: As stated above future state is for this inspector to auto-update the list based on discovered parameters (i.e. Office 365 email addresses, Active Directory Users)

Schedule

  • The default scheduling settings of 1 per week is typically sufficient, but you have the option to adjust to another setting if necessary.
  • Unless you are using the inspection for a defined period of time, it's best to leave the end date blank so that it will continue to run perpetually.

Save

Click Save to schedule the Inspector

📘

Trigger Inspection Schedule

You have the option to run the inspector by clicking the "Play" icon.