# Posture Events

Collects and ingests posture events from Nightfall AI, providing visibility into security posture issues such as data exposure, misconfigurations, and policy violations across your organization's SaaS applications.

**Sync Type: Incremental**

## Details

This input collects posture events from the Nightfall Posture Management API, capturing security-related events including data leaks, misconfigurations, and compliance gaps detected across integrated SaaS applications. The input supports incremental sync with cursor-based pagination to ensure only new events are collected on subsequent runs.

## Prerequisites

Before connecting Monad to Nightfall, you need:

1. A Nightfall AI account with access to the Posture Management feature.
2. An API key with permissions to access the Posture Management APIs.

## Setup Instructions

### 1. Obtain Your API Key

1. Log in to your Nightfall AI dashboard.
2. Navigate to **Settings** > **API Keys** (or Developer Settings).
3. Create a new API key or use an existing one with appropriate permissions.
4. Copy the API key securely. You'll need it when configuring the Monad connector.

## Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

### Settings

| Setting | Type | Required | Description |
|---------|------|----------|-------------|
| State | multi-select | No | Filter events by their status. Available options: `ACTIVE`, `RESOLVED`, `EXPIRED`, `PENDING`. If not specified, all event types are collected. |
| Backfill Start Time | string | No | The date to start fetching data from. If not specified, no past records will be fetched. |
| API Rate Limit | object | No | Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See [API Rate Limiting](../../../guides/rate-limiting) for the field format, limits, and how to choose a value. |

### Secrets

| Secret | Type | Required | Description |
|--------|------|----------|-------------|
| API Key | string | Yes | API key for authenticating with the Nightfall API. This is passed as a Bearer token in the Authorization header. |

## Related Articles

- [Nightfall Developer API Documentation](https://help.nightfall.ai/developer-api)
- [Nightfall Posture Management APIs](https://help.nightfall.ai/developer-api/nightfall_apis/posture-management-apis)

## Sample Record

```json
{
    "appInfo": {
        "id": "6896dfad-32ae-dbf5-4443-32a76e9c2641",
        "name": ""
    },
    "assetsCount": "88",
    "createdAt": "1766512615305",
    "eventType": "ADD_EXTERNAL_USER",
    "id": "10ee7db7-2fdc-efbc-b1a5-3e6049b1e3c0",
    "integration": "GDRIVE",
    "policyUUIDs": [
        "91a4d426-3ab8-8570-7eac-b3593adfff8c"
    ],
    "state": "RESOLVED",
    "userInfo": {
        "deviceId": "4f585e0b-994e-a5df-298d-18ac028d9edf",
        "isExternal": "false",
        "machineName": "MCHINE2",
        "userEmail": "bob.williams@example.com",
        "userProfileLink": "https://example.com",
        "username": "Grimes_AIC"
    }
}
```