Collected Data

What it is: The collected-data matrix shows which data types each Discovery collector gathers. Use this page to check whether a collector retrieves account data, groups, logon events, MFA details, or SSH keys for a given platform.

Why it matters: Before you add a data source, you need to know what data Discovery can pull from it. This matrix helps you confirm that a collector meets your audit and compliance needs before you configure it.

How to Read This Table

Symbol	Meaning
Yes	The collector gathers this data type today
No	The platform supports this data type, but the collector does not gather it
N/A	This data type does not apply to the platform

Cloud and SaaS Platforms

Platform	Accounts	Groups / Roles	Logon Events	MFA	MFA Basic	MFA Detailed	SSH Keys
AWS	Yes	Yes	No	Yes	Yes	No	Yes
Azure (Entra ID)	Yes	Yes	Yes	Yes	Yes	Yes	N/A
Dayforce	Yes	Yes	No	Yes	No	No	N/A
GitHub	Yes	Yes	No	Yes	No	No	Yes
GitLab	Yes	Yes	No	No	No	No	No
Google Cloud Platform	Yes	Yes	No	Yes	No	No	N/A
Google Workspace	Yes	Yes	No	Yes	No	No	N/A
Have I Been Pwned	Yes	Yes	N/A	N/A	N/A	N/A	N/A
Keeper	Yes	Yes	No	Yes	No	No	N/A
Okta	Yes	Yes	Yes	Yes	Yes	Yes	N/A
SailPoint (ISC)	Yes	Yes	No	No	No	No	N/A
Salesforce	Yes	Yes	No	Yes	Yes	No	N/A
ServiceNow	Yes	Yes	No	No	No	No	N/A
Slack	Yes	N/A	No	Yes	Yes	No	N/A
StrongDM	Yes	Yes	No	No	No	No	N/A
Tableau	Yes	Yes	No	No	No	No	N/A

Databases

Platform	Accounts	Groups / Roles	Logon Events	MFA	MFA Basic	MFA Detailed	SSH Keys
PostgreSQL	Yes	Yes	No	N/A	N/A	N/A	N/A
SQL Server	Yes	Yes	No	N/A	N/A	N/A	N/A

Data Center and On-Premises

Platform	Accounts	Groups / Roles	Logon Events	MFA	MFA Basic	MFA Detailed	SSH Keys
Active Directory (MS-AD)	Yes	Yes	No	N/A	N/A	N/A	N/A
Apache (Linux)	Yes	Yes	No	N/A	N/A	N/A	N/A
AS/400	Yes	Yes	No	N/A	N/A	N/A	No
LDAP (Generic)	Yes	Yes	No	N/A	N/A	N/A	N/A
Linux Host	Yes	Yes	Yes	N/A	N/A	N/A	Yes
PAN-OS	Yes	Yes	Yes	Yes	Yes	Yes	Yes
vSphere	Yes	Yes	Yes	N/A	N/A	N/A	N/A
Windows Host	Yes	Yes	No	N/A	N/A	N/A	N/A
WindowsRM Host	Yes	Yes	Yes	N/A	N/A	N/A	N/A

Orchestration

Platform	Accounts	Groups / Roles	Logon Events	MFA	MFA Basic	MFA Detailed	SSH Keys
Kubernetes	Yes	Yes	N/A	N/A	N/A	N/A	N/A
Kubernetes Pods (Linux)	Yes	Yes	Yes	N/A	N/A	N/A	N/A

Vault and PAM

Platform	Accounts	Groups / Roles	Logon Events	MFA	MFA Basic	MFA Detailed	SSH Keys
BeyondTrust	Yes	Yes	No	No	No	No	N/A
CyberArk	Yes	Yes	No	No	No	No	N/A

Column Definitions

Column	What It Measures
Accounts	User accounts, service accounts, computer accounts, and federated accounts
Groups / Roles	Group memberships, role assignments, and group hierarchy
Logon Events	Login history and authentication event data
MFA	Whether the platform reports MFA enrollment status (enabled, disabled, or pending)
MFA Basic	Device count and enrollment status per account
MFA Detailed	Device type, method (TOTP, push, FIDO2), and per-factor configuration
SSH Keys	SSH public key discovery and association with accounts