Prism Data Analytics

Prism is Iru’s device data collection and analytics platform that powers Iru AI’s intelligent insights. Prism automatically collects and organizes detailed information about your devices, providing the data foundation for AI-powered analysis and recommendations.

​

About Prism

Prism serves as the data foundation that powers Iru AI’s ability to answer questions about your device fleet and provide actionable recommendations. Prism automatically collects and organizes data about your devices, while Iru AI makes this data accessible through conversational interfaces and proactive insights. Together, Prism and Iru AI provide a powerful combination of detailed data visibility and intelligent analysis.

​

Prism Data Categories

Prism currently exposes the following data categories that power Iru AI’s capabilities:

• Devices: General information about your enrolled devices–this section will eventually replace the main devices page within Iru Endpoint.
• Activation Lock: Activation lock details and status across iOS, iPadOS, visionOS and macOS devices.
• Application Firewall: Information about the status of the built-in macOS application firewall. This category does not include firewall exceptions. These will be available at a later time in their own category.
• Apps: Application inventory across your iOS, iPadOS, tvOS, visionOS and macOS device fleet.
• Desktop & Screensaver: Desktop and screensaver configuration for macOS devices.
• FileVault: FileVault status on macOS devices.
• Gatekeeper & XProtect: Gatekeeper and XProtect version and status information on macOS clients. Gatekeeper exceptions will be coming as a separate category.
• Installed Profiles: All installed profiles across all device types, including profiles not installed by Iru Endpoint.
• Kernel Extensions: All installed kernel extensions and their status for macOS devices.
• Launch Agents & Daemons: All launch daemons and launch agents and their status for macOS devices.
• Local Users: All local users for macOS devices.
• Startup Settings: Information such as System Integrity Protection (SIP) status, Sealed System Volume (SSV) status, and other core security settings for macOS.
• System Extensions: All installed system extensions and their status for macOS devices.
• Transparency Database: All Transparency, Consent, and Control/Privacy Preferences Policy Control (TCC/PPPC) exceptions for macOS devices.

​

Collection Frequency

Collection frequency depends on the category and method in which Iru collects the data.

​

Platform-Specific Data Collection

​

Data Collection Methods

​

Agent-Based Collection

The Kandji Agent collects data through:

• System APIs: Direct access to system information and status
• File System Monitoring: Tracking changes to system files and configurations
• Process Monitoring: Monitoring running processes and services
• Event Logging: Collecting system events and security logs

​

MDM-Based Collection

MDM protocols collect data through:

• Device Queries: Requesting specific device information
• Status Reports: Receiving automatic status updates
• Command Responses: Collecting data from MDM command responses
• Profile Information: Gathering data from installed configuration profiles

​

Using Prism

​

Prism Interface

​

The Prism Tab

This is the new tabbed navigation layout to switch between the Devices and Prism pages of the Devices section in Iru Endpoint. Clicking Prism will open the Prism tab.

​

Global Filters

The Edit view button allows you to filter the available categories and the results within all categories based on Blueprint or device family. For example, you may want to show only iOS devices within the All Employees Blueprint. This global filter affects all categories. Some categories may become grayed out if they are not applicable to the filtered platform. For example, FileVault becomes grayed out if you select the global filter for iOS devices.

​

Collapse Sidebar

This button hides or unhides the prism category sidebar, allowing you to have a larger display area for the table. Additionally, you can hide the main Iru sidebar to get an even larger display area.

​

Edit Columns

When clicked, the column selector will open the column selection dialog. This modal dialog allows you to select the specific attributes you want visible in the table for the current category.

​

CSV Export

The CSV export button allows you to export all the contents of the category you are viewing. You can choose whether to include the currently displayed columns or all attributes of the category.

​

Add Filters

The Add Filter button allows you to filter the results of the table based on the value of any attribute within the category. For example, within the FileVault category, you may want to create a filter that shows you where FileVault is ON but Iru does not yet have the FileVault Recovery Key escrowed.

​

Pagination Controls

The pagination controls will allow you to page through a category.

​

Attribute Values

It’s important to understand the possible values for individual attributes within Prism. A single attribute may:

• Have a value
  • Boolean (true/false, yes/no, on/off), strings, numeric values, etc.
• May have an empty value (for attributes that return an empty value)
  • For example, a launch daemon that doesn’t have any program arguments
• May be null, especially if not applicable to the device platform
  • For example, application signature on iOS devices, because Apple does not expose application signing information over the MDM protocol

​

Cross-Category Shared Attributes

You will notice that some attributes are present in each Prism category:

• Device
  • The name of the enrolled device–links to the device record
• Assigned User
  • The assigned user of the device record–links to the user record
• Blueprint
  • The assigned Blueprint for the device–links to the Blueprint record
• Last Collected
  • The last timestamp at which the data was collected
• Last Changed
  • The last timestamp at which the data was collected and the values mutated from their previous state. For example, FileVault status was collected and has toggled to On.

​

Privacy and Security

​

Data Protection

Iru implements data protection measures:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict access controls limit who can view device data
• Audit Logging: All data access is logged and auditable
• Data Retention: Configurable data retention policies

​

Compliance

Prism data collection complies with:

• GDPR: European data protection regulations
• CCPA: California consumer privacy laws
• SOC 2: Security and availability standards
• ISO 27001: Information security management

​

API Access

Prism was designed with an ‘API-first’ approach. From day one, everything you can do via the web application is achievable through the Iru API. With the Prism API, you can programmatically:

• Query any individual category with any subset of filters
• Request a CSV export of any category and retrieve the result set asynchronously

You can find the permissions for Prism API access in the API permissions UI in the Iru Web App under Settings > Access. These permissions are not turned on by default for existing API tokens.

​

Best Practices

​

Troubleshooting