Endpoint/Identity Discovery

Alerts are correlated to endpoints and identities during processing, and Red Canary can create new Endpoints and Identities in Red Canary if they do not already exist.

When you check the Enable endpoint discovery and Enable identity discovery checkboxes and Red Canary identifies identities and records that we do not already have, Red Canary will add endpoint and identity records to our database and user interface.

Enable endpoint and identity discovery

1. Check the Enable endpoint discovery and/or Enable identity discovery checkboxes.

2. Add the domain name for which you want to discover endpoints and identities into the Email domains associated with your company and users text box.