Sophos EDR - Asset connector (Users)
Sophos EDR monitors, detects and mitigates threats on endpoints.
Sophos EDR playbooks
Sophos is a cybersecurity company that provides a range of security solutions, including endpoint protection, firewall, and encryption services.
Sophos Firewall
Sophos firewalls offer an integrated software solution that provides superior performance in an all-in-one firewall.
Sophos Threat Analysis Center
The Sophos Threat Analysis Center (STAC), is a dedicated tool for research and analysis of cybersecurity threats.
Splunk (CTI integration)
Sekoia is providing an application for Splunk to detect threats in your logs based on Sekoia.io CTI feed.
Splunk SOAR (CTI integration)
An App for Splunk SOAR is available to interact with our Sekoia.io API.
Squid
Squid is a caching proxy for the Web.
STIX
STIX is a cybersecurity serialization format used to represent cyber threat intelligence, directed by the OASIS Cyber Threat Intelligence Technical Committee.
Stormshield SES
Stormshield SES is a comprehensive cybersecurity solution designed to protect individual devices, such as computers and servers, from various cyber threats and attacks.
Stormshield SES playbooks
Stormshield SES is designed to protect endpoints such as desktops, laptops, and servers against a variety of threats and cyberattacks.
Stormshield SNS
Stormshield Network Security firewalls provides comprehensive security and high performance network protection.
Stormshield SNS playbooks
Stormshield Network Security is a range of network security appliances.
Suricata / Stamus Networks
Suricata is a free and open source, mature, fast and robust network threat detection engine.
Swimlane Turbine (CTI integration)
Swimlane + CTI is a threat lookup tool that automatically checks if links or files are bad by querying global databases for you.
Swimlane Turbine (XDR integration)
Swimlane + XDR is a unified kill-switch that takes an alert and instantly blocks the threat across your entire network.
Symantec / Broadcom Endpoint
Symantec Endpoint Protection is a client-server solution that protects laptops, desktops, and servers in your network against malware, risks, and vulnerabilities.
Systancia Cleanroom
Systancia Cleanroom is a secure and isolated virtualized environment that ensures confidentiality and integrity for sensitive data and applications.
Tanium
Tanium solutions manage and protect networks and endpoints.
TAXII
The Intelligence Center also exposes a TAXII 2.1 server that conforms to the specification.
TEHTRIS EDR
TEHTRIS EDR is a security product to monitor, detect and mitigate threats on endpoints.
Tenable Identity Exposure / Alsid
Tenable Identity Exposure / Alsid is an automated security solution that monitors the components of Active Directory infrastructures by detecting attacks in real time, identifying existing weaknesses and vulnerabilities.
Tenable Vulnerability Management - Asset connector (Vulnerabilities)
Tenable.io is a cloud-based exposure and vulnerability management platform that provides continuous visibility across on-prem, cloud, container, and web application assets.
The Hive playbooks
TheHive is a scalable, open source and free Security Incident Response Platform.
Thinkst Canary
Thinkst Canary is a deceptive honeypot device that mimics various systems to lure and detect cyber threats, providing early and accurate breach alerts.
ThreatQuotient
You can access Sekoia CTI feed through ThreatQuotient's market place.
Torq
Torq is an enterprise-grade hyperautomation platform that automates complex security and IT workflows without code.
Tranco
Tranco is an top sites ranking list hardened against manipulation.
Trapster (by Ballpoint)
Trapster deploys honeypots across your network to detect lateral movements, malicious scans, and insider threats.
Trellix Advanced Threat Defense
The Advanced Threat Defense Appliances are purpose-built, scalable, and flexible high-performance servers designed to analyze suspicious files for malware.
Trellix EDR
Trellix has been involved in the detection and prevention of major cybersecurity attacks.