Fortinet FortiProxy
FortiProxy is a web proxy that protects clients against internet threats. In this documentation, we will explain one way to collect and send FortiProxy logs to Sekoia.io.
Fortinet FortiSOAR
To install the FortiSOAR integration, you first have to create an API Key in Sekoia.io XDR with specific permissions.
Fortinet FortiWeb
This documentation details one way to collect and send FortiWeb logs to Sekoia.io: from the FortiWeb machine to an internal syslog concentrator, then forwarded to Sekoia.io.
Fortinet Lacework FortiCNAPP
The Lacework Cloud Security provides continuous cloud security monitoring and automated threat detection, safeguarding cloud environments with real-time insights and compliance enforcement.
FreeRADIUS
FreeRADIUS is an implementation of RADIUS, a protocol for remote user Authentication, Authorization, and Accounting.
Gatewatcher AionIQ / Trackwatch (v102/v103)
Gatewatcher AionIQ is a detection and response platform for your network that identifies malicious actions and suspicious behaviors.
Gatewatcher AionIQ V2.5
Gatewatcher AionIQ V2.5 is an advanced network detection and response platform that uses AI-driven multi-engine analysis to identify known and zero-day threats in real time. It passively maps assets and uncovers hidden risks across hybrid and cloud infrastructures, integrating seamlessly into existing SOC ecosystems to accelerate triage and automate remediation.
Github Audit logs
Github audit logs represents activities on your Github organization.
Git playbooks
Git is a free and open source distributed version control system designed to handle projects with speed and efficiency.
Glimps
Glimps offers a DeepLearning solution to detect, analyze and classify malwares.
Google Cloud Audit Logs
Google Cloud Logging centralizes logs from Google Cloud products.
Google Cloud Load Balancing
Google Cloud Load Balancing is a fully distributed, software-defined managed service that distributes traffic across multiple backend instances in multiple regions.
Google Cloud VPC Flow Logs
Google Cloud Logging centralizes logs from Google Cloud products.
Google Kubernetes Engine
Google Cloud Logging centralizes logs from Google Cloud products.
Google Workspace / Chrome OS / Chrome Enterprise
Google Workspace, formerly known as G Suite, is a cloud-based productivity and collaboration platform developed by Google, featuring tools like Gmail, Google Drive, and Google Docs.
HAProxy
HAProxy is a free, open-source software that provides a high availability load balancer and proxy server for TCP and HTTP-based applications, distributing requests across multiple servers.
HarfangLab - Asset connector (Devices)
HarfangLab EDR is a European EDR for Windows, macOS, and Linux that delivers real-time telemetry, ATT&CK-mapped detections, and rapid response.
HarfangLab EDR
HarfangLab is an Endpoint detection and response (EDR) solution certified by ANSSI since 2020.
HarfangLab EDR - Asset connector (Softwares)
HarfangLab is an EDR certified by ANSSI since 2020 used by large international companies, operating in very sensitive sectors.
HarfangLab EDR playbooks
HarfangLab is an Endpoint detection and response (EDR) solution certified by ANSSI since 2020.
Harven
Harven is an intelligent automation platform that streamlines data workflows and delivers real-time actionable insights.
Hatching Triage
Triage is a malware analysis sandbox as a service, brought by Hatching.
Hodor Activity
Hodor is an AI security gateway that acts as a protective shield between AI agents and enterprise systems. It provides granular access control, real-time payload filtering, and individual agent identities to prevent data leaks and ensure secure agent execution.
Holm Security Vulnerability Management - Asset connector (Devices)
Holm Security Vulnerability Management is an all-in-one platform that proactively identifies and prioritizes risks across your networks, cloud environments, and APIs.
Holm Security Vulnerability Management - Asset connector (Vulnerabilities)
Holm Security Vulnerability Management is an all-in-one platform that proactively identifies and prioritizes risks across your networks, cloud environments, and APIs.
Hornetsecurity 365 Total Protection
Hornetsecurity is a leading provider of cloud-based email security and data protection services.
HPE Aruba Networking ClearPass
HPE Aruba Networking ClearPass offers granular network access control with dynamic, role-based policies and device profiling across wired, wireless and VPN connections.
IBM AIX
AIX (Advanced Interactive eXecutive) is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.
IBM iSeries / AS 400
IBM iSeries (AS/400) is a robust, scalable family of midrange business computers running the IBM i operating system, known for its integrated DB2 database and strong security features.
IKnowWhat
iknowwhatyoudownload collects torrent files and peers from torrent sites and DHT network.