Tags¶
1Password¶
API¶
- Abnormal Security
- Absolute
- Agari Phishing Defense
- Akamai - Enterprise Application Access
- Akamai - Event Viewer
- Akamai Security Alerts
- Asana
- Azure AD
- Microsoft Azure App Registration
- Azure Event Hub
- Azure MDM Intune
- Bitdefender
- Box
- Britive
- Cameyo
- Carbon Black Defense
- Cisco AMP
- Cloudflare
- Code42 Alerts
- Code42 File Events
- Cofense Triage
- CrowdStrike
- CyberArk Audit
- CyberArk Endpoint Privilege Manager
- CyberArk Identity
- Duo
- FireEye ETP
- GitHub Audit Logs
- Jira
- JumpCloud Directory Insights
- Lastpass
- Lumen DDoS Hyper
- Mambu
- McAfee Web Gateway
- Microsoft Defender for Cloud Apps
- Microsoft Defender for Endpoint
- Microsoft Graph
- Microsoft Office 365 Reports
- Microsoft Office 365
- Mimecast
- Netskope
- Okta
- 1Password
- OpenAI Audit
- Orca
- PAN CASB
- Proofpoint CASB
- Proofpoint Browser Isolation
- Proofpoint On-Demand
- Proofpoint TAP
- Qualys Solutions
- Rapid7 Insight VM
- Sailpoint IAM Cloud
- Salesforce
- Saviynt
- Searchlight
- Shodan
- Signal Sciences Web Application Firewall
- Slack Audit Logs
- Smartsheet
- Snowflake
- Sophos
- Splunk TruSTAR
- Splunk
- Symantec CASB
- Symantec Email Security
- Symantec Web Security Service
- TAXII Feed
- Tenable Vulnerability Management
- Tessian
- ThreatConnect
- Vectra Protect
- Vercara
- Veza System and Audit Events
- Webex
- Wiz.IO
- Workday
- Zoom
- TSI API
Abnormal Security¶
Absolute¶
Agari¶
Agari Phishing Defense¶
Akamai¶
Amazon Web Services¶
Asana¶
Atlassian¶
Audit¶
Barracuda¶
Bitdefender¶
BlackBerry¶
Blue Prism¶
Box¶
Britive¶
Cameyo¶
Carbon Black¶
ChatGPT¶
Chronicle Direct¶
Cisco¶
- Cisco ACI
- Cisco Firepower eStreamer
- Cisco Meraki
- Cisco AMP
- Cisco ASA
- Cisco Email Security
- Cisco Umbrella
Cloudflare¶
Code42¶
Cofense¶
Corelight¶
Crowdstrike¶
CyberArk¶
Cylance¶
Duo¶
ETP¶
Email¶
ExtraHop¶
FireEye¶
Fortinet¶
GCS Bucket¶
Generic Collection¶
- AWS S3
- Azure Blob Storage
- Forwarders
- Cloud Storage
- Pub/Sub
- Generic Webhook
- Oracle Cloud Infrastructure Object Storage
- Splunk
GitHub¶
Google Cloud Platform¶
Google Workspace¶
IOC¶
Imperva¶
Infoblox¶
Jira¶
JumpCloud¶
Juniper Networks¶
Lastpass¶
Layer4¶
LimaCharlie¶
Linux¶
Lumen¶
Mambu¶
ManageEngine¶
McAfee¶
Microsoft¶
Microsoft Azure¶
- Azure AD
- Microsoft Azure App Registration
- Azure Blob Storage
- Azure Event Hub
- Azure MDM Intune
- Microsoft Defender for Cloud Apps
- Microsoft Defender for Endpoint
- Microsoft Graph
- Microsoft Office 365 Reports
- Microsoft Office 365
Mimecast¶
NSS¶
Netskope¶
Object Storage¶
Office 365¶
Okta¶
OneLogin¶
OpenAI¶
Oracle Cloud Infrastructure¶
Orca¶
PAN¶
PAN CASB¶
Palo Alto¶
Palo Alto Networks¶
Proofpoint¶
Pulse Secure¶
Qualys¶
Rapid7¶
Records¶
S1¶
S3 Bucket¶
- AWS CloudTrail
- AWS CloudWatch
- AWS Config
- AWS Macie
- AWS Route 53
- AWS VPC Flow
- AWS WAF
- Cisco Umbrella
- CrowdStrike
- Imperva WAF
Sailpoint¶
Salesforce¶
Saviynt¶
Searchlight¶
SentinelOne¶
Shodan¶
Signal Sciences¶
Slack¶
Smartsheet¶
Snowflake¶
Sophos¶
Splunk¶
Symantec¶
Symantec CASB¶
Syslog¶
- ManageEngine ADSelfService Plus
- Barracuda Email Security
- Blue Prism
- Carbon Black Response
- Cisco ACI
- Cisco Firepower eStreamer
- Cisco Meraki
- Cisco ASA
- Cisco Email Security
- Corelight
- Cylance
- ExtraHop
- Fortinet FortiGate
- Forwarders
- Infoblox DNS
- Juniper Networks Firewall
- LimaCharlie
- Linux Systems
- McAfee EPO
- Microsoft Windows DHCP
- Microsoft Windows DNS
- Microsoft Windows Event
- Palo Alto Cortex
- Palo Alto Panorama
- pfSense Firewall
- Pulse Secure VPN
- Sailpoint IAM
- SentinelOne
- Symantec Endpoint Protection