> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rad.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Sources Overview

> How data sources power RADbot's AI-driven security outcomes and autonomous threat response.

## Data Sources Power RADbot Intelligence

RADbot uses data from your security tools to execute autonomous security actions. Data sources provide the telemetry and context RADbot needs to detect threats, assess risk, and execute automated responses.

## How Data Enables Security Automation

### **Threat Detection & Response**

RADbot queries cloud providers, SIEMs, and security tools to identify threats in real-time and execute automated responses without human intervention.

### **Risk Assessment & Prioritization**

RADbot correlates data across multiple sources to understand security event context and prioritize responses based on business impact.

### **Continuous Learning & Adaptation**

RADbot learns from data patterns to improve threat detection accuracy and adapt response strategies to your security environment.

### **Autonomous Orchestration**

Data enables RADbot to coordinate security workflows across multiple systems, automatically escalating, containing, and remediating threats.

## Data Source Categories

<CardGroup cols={3}>
  <Card title="Kubernetes" icon="dharmachakra" href="/rad-security/integrations/kubernetes-setup">
    Connect Kubernetes clusters to enable RADbot to analyze misconfigurations, RBAC issues, and image vulnerabilities.
  </Card>

  <Card title="Cloud Providers" icon="cloud" href="/rad-security/integrations/data-sources#cloud-providers">
    AWS, Azure, Google Cloud, Oracle Cloud, and Linode data feeds RADbot with infrastructure telemetry for cloud security monitoring.
  </Card>

  <Card title="Security Tools" icon="shield" href="/rad-security/integrations/data-sources#security-tools">
    SIEM, EDR, vulnerability scanners, and ticketing systems provide RADbot with security event data for comprehensive threat analysis.
  </Card>
</CardGroup>

## Cloud Providers

Connect your cloud infrastructure to RAD Security for comprehensive security monitoring and compliance.

<CardGroup cols={2}>
  <Card title="Amazon Web Services (AWS)" icon="aws" href="/rad-security/integrations/aws-setup">
    Monitor AWS resources, EKS clusters, and cloud compliance. Supports EC2, S3, IAM, and more.
  </Card>

  <Card title="Microsoft Azure" icon="microsoft" href="/rad-security/integrations/azure-setup">
    Secure Azure resources, AKS clusters, and monitor Azure-specific security controls.
  </Card>

  <Card title="Google Cloud Platform" icon="google" href="/rad-security/integrations/gcp-setup">
    Monitor GCP resources, GKE clusters, and Google Cloud security best practices.
  </Card>

  <Card title="Oracle Cloud (OCI)" icon="https://mintcdn.com/radsecurity/mvo_3kMcHMrkweif/images/oracle.svg?fit=max&auto=format&n=mvo_3kMcHMrkweif&q=85&s=4dba2340ee457007d199536562e26344" href="/rad-security/integrations/oci-setup" width="128" height="128" data-path="images/oracle.svg">
    Connect your OCI tenancy for read-only visibility into compute, storage, networking, and IAM resources.
  </Card>

  <Card title="Linode" icon="linode" href="/rad-security/integrations/linode-setup">
    Connect Linode infrastructure for comprehensive cloud security monitoring.
  </Card>
</CardGroup>

## Security Tools

Connect security tools and platforms to enhance RADbot's threat detection and response capabilities.

<CardGroup cols={2}>
  <Card title="SIEM" icon="chart-line" href="/rad-security/integrations/siem/overview">
    Forward security events and logs to Splunk, Rapid7 InsightIDR, and CrowdStrike NextGen SIEM.
  </Card>

  <Card title="EDR" icon="shield-check" href="/rad-security/integrations/edr/overview">
    Integrate endpoint detection and response tools including CrowdStrike, SentinelOne, and Microsoft Defender.
  </Card>

  <Card title="Vulnerability Scanners" icon="shield-halved" href="/rad-security/integrations/vulnerabilities/overview">
    Import vulnerability data from Qualys, Tenable, Rapid7 InsightVM, and CrowdStrike Spotlight.
  </Card>

  <Card title="Ticketing Systems" icon="ticket" href="/rad-security/integrations/ticketing/overview">
    Automate ticket creation and management with Jira Cloud and Torq integrations.
  </Card>

  <Card title="Identity & Access" icon="key" href="/rad-security/integrations/identity-and-access">
    Connect identity providers including Okta, Microsoft Entra ID, and Google Workspace.
  </Card>
</CardGroup>

## Connection Management

### Setting Up Cloud Connections

1. **Access Connection Management**: Navigate to Data Sources > Connections in your RAD Security dashboard
2. **Add Provider**: Click "Add Provider" and select your cloud provider
3. **Configure Credentials**: Follow the provider-specific setup guide
4. **Verify Connection**: Ensure the connection shows as "Active" status

### Connection Health Monitoring

RAD Security continuously monitors your cloud connections to ensure:

* **Authentication Status**: Verifies credentials are valid and not expired
* **API Connectivity**: Tests communication with cloud provider APIs
* **Data Ingestion**: Confirms security data is being collected properly
* **Compliance Scanning**: Validates that compliance checks are running

### Supported Cloud Services

<AccordionGroup>
  <Accordion icon="aws" title="AWS Services">
    * **Compute**: EC2, ECS, Lambda, EKS
    * **Storage**: S3, EBS, EFS
    * **Security**: IAM, CloudTrail, GuardDuty, Security Hub
    * **Networking**: VPC, Security Groups, NACLs
    * **Compliance**: Config, CloudFormation, CloudWatch
  </Accordion>

  <Accordion icon="microsoft" title="Azure Services">
    * **Compute**: Virtual Machines, AKS, Container Instances
    * **Storage**: Blob Storage, Managed Disks, File Storage
    * **Security**: Azure AD, Security Center, Sentinel
    * **Networking**: Virtual Networks, NSGs, Application Gateway
    * **Compliance**: Azure Policy, Blueprints, Compliance Manager
  </Accordion>

  <Accordion icon="google" title="Google Cloud Services">
    * **Compute**: Compute Engine, GKE, Cloud Functions
    * **Storage**: Cloud Storage, Persistent Disks
    * **Security**: Cloud IAM, Security Command Center
    * **Networking**: VPC, Firewall Rules, Cloud Armor
    * **Compliance**: Cloud Asset Inventory, Security Health Analytics
  </Accordion>

  <Accordion icon="https://mintcdn.com/radsecurity/mvo_3kMcHMrkweif/images/oracle.svg?fit=max&auto=format&n=mvo_3kMcHMrkweif&q=85&s=4dba2340ee457007d199536562e26344" title="Oracle Cloud Services" width="128" height="128" data-path="images/oracle.svg">
    * **Compute**: Compute Instances, OKE (Oracle Kubernetes Engine)
    * **Storage**: Block Volumes, Object Storage, File Storage
    * **Security**: IAM (users, groups, policies), Vault
    * **Networking**: VCN, Subnets, Security Lists, Network Security Groups
    * **Compliance**: Audit, tenancy-wide read-only policy via Terraform module
  </Accordion>

  <Accordion icon="linode" title="Linode Services">
    * **Compute**: Linode Instances, Kubernetes Engine
    * **Storage**: Block Storage, Object Storage
    * **Networking**: VPC, NodeBalancers, Firewalls
    * **Security**: Cloud Firewall, Managed Services
  </Accordion>
</AccordionGroup>

## Getting Started

Ready to connect your cloud infrastructure? Follow these quick start guides:

* [AWS Setup Guide](/rad-security/integrations/aws-setup) - Connect your AWS account
* [Azure Setup Guide](/rad-security/integrations/azure-setup) - Connect your Azure subscription
* [Google Cloud Setup Guide](/rad-security/integrations/gcp-setup) - Connect your GCP project
* [Oracle Cloud Setup Guide](/rad-security/integrations/oci-setup) - Connect your OCI tenancy
* [Terraform Integration](/rad-security/integrations/connect-using-terraform) - Infrastructure as Code setup

## Next Steps

After connecting your cloud providers:

1. **Review Security Findings**: Check the Risk & Posture section for any immediate security issues
2. **Configure Alerts**: Set up notifications for critical security events
3. **Enable Compliance Scanning**: Activate compliance monitoring for your industry standards
4. **Set Up Workflows**: Create automated responses to security events