Lucidum Normalization

Lucidum fills the gaps between security solutions. After ingesting data from connectors, Lucidum enriches that data through machine learning. After ingestion, Lucidum:

Deduplicates records. For example, suppose an asset uses DHCP. Suppose Lucidum ingests different information about that asset each day. However, each day, that asset will lease a new IP address. Instead of creating multiple asset records, Lucidum creates a single record for that asset. The single record includes all the IP addresses associated with the asset over time.
Triangulates records. Suppose a single user appears with in multiple solutions with multiple versions of a user name. For example, suppose Lucidum ingests a different name from Azure AD, GitHub, and Intune. Suppose Lucidum ingests that names “John.Smith”, “SmithJ”, and “john.smith@lucidum.io”. Lucidum creates a single entry for that user with a single user name and enriches the user record with information from Azure AD, GitHut, and Intune.
Aggregates records. Suppose Lucidum ingests data about an asset from Carbon Black, Tenable, Intune, VMware, and InfoBlox. Each data source provides some information. Some of these data sources provide unique information. For example, one solution might provide OS and version, another solution might provide vulnerabilitites, another solution might provide hardware information, another solution might provide application data, and another solution might provide cloud information. Lucidum creates a single asset record that aggregates all the data from the multiple solutions.

The Lucidum Normalization dashboard shows how Lucidum makes data easier to manage.

Lucidum Normalization Dashboard

The Lucidum Normalization dashboard displays raw data about assets and Lucidum normalized data about assets.

The normalized assets retain all the data associated with their solutions. And the raw data is always available for use if needed.

For example, the list of assets categorized as “Microsoft Windows” will include all the assets from all the versions of Windows in your environment. The same parameters for vulnerability management and endpoint management apply to the normalized list of assets as to the raw list of assets. A Windows Server 2019 asset that is missing a patch will also appear as missing a patch in the list of Microsoft Windows assets.

This dashboard includes the following charts:

RAW Data from API Sources: OS and Version. This chart shows all the computers, servers, mobile devices, and workstations that Lucidum has found from the data sources in the environment. Lucidum found 2780 assets and 17 versions of operating systems.
Lucidum 1st Level Normalization: Lucidum OS Version. After Lucidum applies its machine learning algorithms to the ingested data, Lucidum found 2782 total computers, servers, mobile devices, and workstations and 15 versions of operating systems.
Lucidum 2nd Level Normalization: OS Category. Using Lucidum OS categories, Lucidum found 2782 total computers, servers, mobile devices, and workstations assets and fives types of operating system.
Assets by Raw Status. This charts shows all assets that Lucidum has found from the data sources in the environment and their statuses. Lucidum found 8,417 assets and 18 statuses.
Assets by Lucidum Status. This charts shows all assets that Lucidum has found from the data sources and with applied machine learning and their statuses. Lucidum found 8,417 assets and 15 statuses.
Assets by Asset Type. This charts shows all assets that Lucidum has found from the data sources in the environment and their asset types. Lucidum found 8,417 assets and 17 asset types.
Assets by Lucidum Asset Type. This charts shows all assets that Lucidum has found from the data sources in the environment and their asset types. Lucidum found 8,417 assets and 14 asset types.
Assets by Raw Vendor. This charts shows all assets that Lucidum has found from the data sources in the environment and their asset types. Lucidum found 8,417 assets and 16 vendors.
Assets by Lucidum Vendor. This charts shows all assets that Lucidum has found from the data sources in the environment and their asset types. Lucidum found 8,417 assets and 16 vendors with consistent naming.