After completing installation, the next step is to configure the modules that will send data to LT Auditor MP. Each module is responsible for collecting activity from a specific part of your environment and forwarding it to the LT Auditor MP server.
Modules are installed separately on the relevant servers or systems in your environment. Refer to each module’s dedicated documentation section in this knowledge base for full installation and configuration instructions.
Available modules:
| Module | Purpose |
| EventLogCentral | Collects Windows Event Logs and NTFS file activity |
| PowerShell Orchestrator | Runs assessments against Active Directory and Entra ID |
| PII Scanner | Scans Windows and Linux systems for sensitive data |
| EntraConnector | Collects Azure sign-in logs and Entra ID audit events |
| NSS Module | Collects NSS file activity from OES servers |
For additional documentation and resources, visit: https://www.bluelance.com/docs
[Your administrator should note here any internal processes for requesting or obtaining module packages in your environment.]