Prism Data Analytics

Prism is Iru’s device data collection and analytics platform that powers Iru AI’s intelligent insights. Prism automatically collects and organizes detailed information about your devices, providing the data foundation for AI-powered analysis and recommendations.

​

About Prism

Prism serves as the data foundation that powers Iru AI’s ability to answer questions about your device fleet and provide actionable recommendations. Prism automatically collects and organizes data about your devices, while Iru AI makes this data accessible through conversational interfaces and proactive insights. Together, Prism and Iru AI provide a powerful combination of detailed data visibility and intelligent analysis.

​

Prism Data Categories

Prism currently exposes the following data categories that power Iru AI’s capabilities:

​

Collection Frequency

Collection frequency depends on the category and method in which Iru collects the data.

​

Platform-Specific Data Collection

​

Data Collection Methods

​

Agent-Based Collection

The Kandji Agent collects data through:

• System APIs: Direct access to system information and status
• File System Monitoring: Tracking changes to system files and configurations
• Process Monitoring: Monitoring running processes and services
• Event Logging: Collecting system events and security logs

​

MDM-Based Collection

MDM protocols collect data through:

• Device Queries: Requesting specific device information
• Status Reports: Receiving automatic status updates
• Command Responses: Collecting data from MDM command responses
• Profile Information: Gathering data from installed configuration profiles

​

Using Prism

​

Prism Interface

​

The Prism Tab

This is the new tabbed navigation layout to switch between the Devices and Prism pages of the Devices section in Iru Endpoint. Clicking Prism will open the Prism tab.

​

Global Filters

The Edit view button allows you to filter the available categories and the results within all categories based on Blueprint or device family. For example, you may want to show only iOS devices within the All Employees Blueprint. This global filter affects all categories. Some categories may become grayed out if they are not applicable to the filtered platform. For example, FileVault becomes grayed out if you select the global filter for iOS devices.

​

Collapse Sidebar

This button hides or unhides the prism category sidebar, allowing you to have a larger display area for the table. Additionally, you can hide the main Iru sidebar to get an even larger display area.

​

Edit Columns

When clicked, the column selector will open the column selection dialog. This modal dialog allows you to select the specific attributes you want visible in the table for the current category.

​

CSV Export

The CSV export button allows you to export all the contents of the category you are viewing. You can choose whether to include the currently displayed columns or all attributes of the category.

​

Add Filters

The Add Filter button allows you to filter the results of the table based on the value of any attribute within the category. For example, within the FileVault category, you may want to create a filter that shows you where FileVault is ON but Iru does not yet have the FileVault Recovery Key escrowed.

​

Pagination Controls

The pagination controls will allow you to page through a category.

​

Attribute Values

It’s important to understand the possible values for individual attributes within Prism. A single attribute may:

• Have a value
  • Boolean (true/false, yes/no, on/off), strings, numeric values, etc.
• May have an empty value (for attributes that return an empty value)
  • For example, a launch daemon that doesn’t have any program arguments
• May be null, especially if not applicable to the device platform
  • For example, application signature on iOS devices, because Apple does not expose application signing information over the MDM protocol

​

Cross-Category Shared Attributes

You will notice that some attributes are present in each Prism category:

• Device
  • The name of the enrolled device–links to the device record
• Assigned User
  • The assigned user of the device record–links to the user record
• Blueprint
  • The assigned Blueprint for the device–links to the Blueprint record
• Last Collected
  • The last timestamp at which the data was collected
• Last Changed
  • The last timestamp at which the data was collected and the values mutated from their previous state. For example, FileVault status was collected and has toggled to On.

​

Privacy and Security

​

Data Protection

Iru implements data protection measures:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict access controls limit who can view device data
• Audit Logging: All data access is logged and auditable
• Data Retention: Configurable data retention policies

​

Compliance

Prism data collection complies with:

• GDPR: European data protection regulations
• CCPA: California consumer privacy laws
• SOC 2: Security and availability standards
• ISO 27001: Information security management

​

API Access

Prism was designed with an ‘API-first’ approach. From day one, everything you can do via the web application is achievable through the Iru API. With the Prism API, you can programmatically:

• Query any individual category with any subset of filters
• Request a CSV export of any category and retrieve the result set asynchronously

​

Best Practices

​

Troubleshooting