Posture Events

Collects and ingests posture events from Nightfall AI, providing visibility into security posture issues such as data exposure, misconfigurations, and policy violations across your organization's SaaS applications.

Sync Type: Incremental

Details

This input collects posture events from the Nightfall Posture Management API, capturing security-related events including data leaks, misconfigurations, and compliance gaps detected across integrated SaaS applications. The input supports incremental sync with cursor-based pagination to ensure only new events are collected on subsequent runs.

Prerequisites

Before connecting Monad to Nightfall, you need:

1. A Nightfall AI account with access to the Posture Management feature.
2. An API key with permissions to access the Posture Management APIs.

Setup Instructions

1. Obtain Your API Key

1. Log in to your Nightfall AI dashboard.
2. Navigate to Settings > API Keys (or Developer Settings).
3. Create a new API key or use an existing one with appropriate permissions.
4. Copy the API key securely. You'll need it when configuring the Monad connector.

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Description
State	multi-select	No	Filter events by their status. Available options: ACTIVE, RESOLVED, EXPIRED, PENDING. If not specified, all event types are collected.
Backfill Start Time	string	No	The date to start fetching data from. If not specified, no past records will be fetched.

Secrets

Secret	Type	Required	Description
API Key	string	Yes	API key for authenticating with the Nightfall API. This is passed as a Bearer token in the Authorization header.

Related Articles

• Nightfall Developer API Documentation
• Nightfall Posture Management APIs

Sample Record

{
    "appInfo": {
        "id": "6896dfad-32ae-dbf5-4443-32a76e9c2641",
        "name": ""
    },
    "assetsCount": "88",
    "createdAt": "1766512615305",
    "eventType": "ADD_EXTERNAL_USER",
    "id": "10ee7db7-2fdc-efbc-b1a5-3e6049b1e3c0",
    "integration": "GDRIVE",
    "policyUUIDs": [
        "91a4d426-3ab8-8570-7eac-b3593adfff8c"
    ],
    "state": "RESOLVED",
    "userInfo": {
        "deviceId": "4f585e0b-994e-a5df-298d-18ac028d9edf",
        "isExternal": "false",
        "machineName": "MCHINE2",
        "userEmail": "bob.williams@example.com",
        "userProfileLink": "https://example.com",
        "username": "Grimes_AIC"
    }
}