Enrichment lookups in Exposure Analytics

Exposure Analytics uses data from a number of lookups to enrich entities during discovery.

To review your internal enrichment data, select Configure then All configurations. In the Exposure analytics section, select Inventory enrichment and then Enrichment lookups. Select the tab for the type of data listing you want to view.

The following types of internal enrichment data listings are available. You can hide or clone entries that are predefined in Exposure Analytics, but you cannot update or delete them.

Data listing Description
MAC vendor

Exposure Analytics contains a list of known MAC address vendors taken from the IEEE Registration Authority. You can review and search for MAC addresses on the MAC vendor listing page.

You cannot modify or add to these values.
Geolocation

The geolocation database contains all of the major cities and countries in the world. You can use the longitude and latitude coordinates from the geolocation database on map visualizations throughout Exposure Analytics.

Select Add or clone an existing entry to create additional geolocation entries relevant to your organization.
Default users

A common list of default user IDs and the vendors they might be associated with. When a user is discovered that matches a user in this lookup, a default_user=1 field value is assigned. This data is then used by the Default user view in Entity discovery insights.

Select Add or clone an existing entry to create additional default users that exist within your organization.
Legacy OS A list of operating systems that are considered legacy or no longer supported. When an OS is discovered that matches this lookup, a legacy_os=1 field value is assigned. This data is then used by the Operating system view in Entity discovery insights.

Select Add or clone an existing entry to create additional legacy operating systems that exist within your organization.