Darktrace PREVENT

Darktrace PREVENT (previously Enterprise Immune System) harnesses scalable, self-learning AI to understand the digital DNA of an organization and illuminate unpredictable cyber-threats at an early stage. Darktrace Enterprise Immune System discovers attacks and threats and delivers complete visibility across cloud and collaboration tools, remote endpoints, IoT, and the corporate network.

Configuring the Connector for Darktrace Enterprise Immune System

To configure Lucidum to ingest data from Darktrace Enterprise Immune System :

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • Host and Port (required): The host and port of the Darktrace API

   • Public API Key and Private API Key (required) - Darktrace API public and private API keys.

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.