Axonius Log Monitoring

Integration Overview

Axonius is a cybersecurity asset management platform that provides visibility and control over devices, users, and software across your environment. Panther integrates with Axonius to continuously ingest and monitor Axonius activity logs, giving your security team a centralized view of asset-related events alongside the rest of your security data. Normalized log data is stored in Panther's Snowflake-powered security data lake for detection and investigation.

Use Cases for Axonius Logs

Common SIEM use cases for Axonius logs include:

• Monitoring asset inventory changes for unauthorized devices or users

• Correlating Axonius activity with other security events to detect anomalous behavior

• Maintaining continuous visibility into the devices and software in your environment

Onboarding Axonius Logs in Panther

Panther's integration for Axonius is easy to configure, allowing you to onboard your log data in just a few minutes. Axonius logs are streamed to Panther through an HTTPS webhook configured in Axonius, using shared secret, bearer, or basic authentication.

For more detailed steps on onboarding Axonius or for supported log schema, you can view our Axonius documentation here.