Discovery Methods, Ranked
Five sources, each seeing a different slice. None sees everything, and the combination that works depends on what your organisation already has.
Reference · 707 words
Discovery
No single source sees your estate. Four sources, each with a different blind spot, plus the reconciliation that is most of the actual work and the gaps that remain after it.
6 records · 4,517 words
The Identity Provider as a Discovery Source
The cleanest data available and the easiest to obtain. What to extract, what it means, and the specific ways it misleads.
Procedure · 764 words
Expense and Card Data as a Discovery Source
Finance sees what IT does not. The join between merchant descriptors and application names is the work, and it is the most tedious part of discovery.
Procedure · 748 words
OAuth Grants: The Source Nobody Checks
Third-party applications your users granted access to company email, files and calendars. Finds what nothing else sees, and the findings sting.
Procedure · 803 words
Reconciling Discovery Sources
Four sources produce four different names for one application. The join is manual, it is the bulk of the work, and no tool does it reliably.
Procedure · 766 words
What Discovery Misses
Every automated source has a blind spot, and the applications hiding in the intersection of all of them are systematically the higher-risk ones.
Analysis · 729 words