Ilert playbooks
Ilert is an incident management platform. This module triggers alerts and manages incidents.
Imperva WAF
Imperva Web Application Firewall helps you to protect your web applications and your APIs.
Infoblox DDI
Infoblox DNS, DHCP, and IP address management (DDI) enables customers to control and automate their network.
ISC DHCP
ISC DHCP offers a complete open-source solution for implementing DHCP servers.
Ivanti / Pulse Connect Secure
Pulse Connect Secure is an SSL VPN solution for remote and mobile users.
Jizo AI
Jizo AI / Sesame it NDR is a network observability platform that enables decision-makers to anticipate, identify and block cyber-attacks.
Jumpcloud Directory Insights
Jumpcloud Directory Insights provides activity records related to your organization.
Juniper Networks NGFW
Juniper Next-Generation Firewall (NGFW) services provide a set of cyber defenses that, together, reduce your attack surface.
Juniper Switches
Juniper Networks' JunOS is an advanced operating system powering Juniper's networking devices, renowned for its reliability, performance, and comprehensive feature set.
Kaspersky Endpoint Security
Kaspersky Endpoint Security is an advanced security solution designed to safeguard businesses, their networks, and data against a wide array of cyber threats.
Keycloak
Keycloak is an open-source identity and access management solution that enables Single Sign-On (SSO), social login and standard protocols like OAuth2, OpenID Connect and SAML.
Kubernetes Audit Logs
Kubernetes is an open-source container orchestration system for automating software deployment, scaling and management.
LocateRisk Cyber Risk Analysis
LocateRisk Cyberrisk Analysis is an automated, non-invasive assessment tool that evaluates an organization’s external IT infrastructure from an outside perspective.
LockSelf LockPass / LockTransfer / LockFiles
LockSelf is a complete digital vault that enables organizations to secure password management, protect data exchanges, and confidently share with stakeholders.
Lookout Mobile Endpoint Security
Lookout Mobile Endpoint Security is a robust solution designed to protect devices from threats and data breaches in real time.
ManageEngine ADAudit Plus
ManageEngine ADAudit Plus is a robust Active Directory auditing and compliance solution, empowering organizations to track and monitor changes, detect security threats, and ensure regulatory compliance.
Mandrill playbooks
Mandrill is a transactional email platform from Mailchimp.
Mattermost playbooks
Mattermost is a secure, open and flexible collaboration platform.
Microsoft 365 / Office 365
Microsoft Office 365 is an online service, providing the Microsoft Office Products.
Microsoft 365 / Office 365 Message Trace
Microsoft 365 Message trace follows email messages as they travel through your Exchange Online organization.
Microsoft 365 / Office 365 Message Trace (via Graph API)
Microsoft 365 Message trace follows email messages as they travel through your Exchange Online organization.
Microsoft Active Directory - Asset connector (Users)
Microsoft Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks.
Microsoft Active Directory playbooks
Microsoft Active Directory (Microsoft AD), is a directory service developed by Microsoft for Windows domain networks.
Microsoft Always On VPN
This guide will explain how to forward Network Policy Server (NPS) logs to Sekoia.io.
Microsoft Copilot 365 - Audit Logs
Microsoft 365 Copilot is an embedded, AI-powered assistant that integrates with daily apps like Word, Excel, Teams, and Outlook.
Microsoft Defender - Asset connector (Vulnerabilities)
Microsoft Defender is a entreprise defense suite that coordinates detection, prevention, investigation, and response across endpoints, identities, email, and cloud applications.
Microsoft Defender XDR
Microsoft Defender XDR (formerly Microsoft 365 Defender) is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications.
Microsoft Defender XDR - Asset connector (devices)
Microsoft Defender is a entreprise defense suite that coordinates detection, prevention, investigation, and response across endpoints, identities, email, and cloud applications.
Microsoft Defender XDR Incidents - Graph API
Microsoft Defender is a entreprise defense suite that coordinates detection, prevention, investigation, and response across endpoints, identities, email, and cloud applications.
Microsoft Defender XDR playbooks
Microsoft Defender for Endpoint is an Endpoint Detection and Response (EDR) product that monitors the security of endpoints.