Microsoft Entra ID - Asset connector (Users)
Microsoft Entra ID (formerly Azure Active Directory) is a cloud-based identity and access management service that provides secure authentication, authorization, and user management services.
Microsoft Entra ID - Event Hubs
Microsoft Entra ID (Azure AD) is a cloud-based Identity and Rights management service.
Microsoft Entra ID - GraphAPI
Microsoft Entra ID (Graph API) is a cloud-based Identity and Rights management service developed and managed by Microsoft Corp.
Microsoft Entra ID - playbooks
Microsoft Entra ID (Azure AD) is an enterprise identity service that provides single sign-on, multifactor authentication, and conditional access to guard against 99.9 percent of cybersecurity attacks.
Microsoft IIS
This setup guide will show you how to forward your Microsoft IIS logs to Sekoia.io by means of a syslog transport channel.
Microsoft Intune
Microsoft Intune helps you protect your workforce's corporate data by managing devices and apps.
Microsoft Remote Server playbooks
To enable this module, please make sure you have properly configured WinRM on remote server.
Microsoft Sentinel (CTI integration)
Microsoft Sentinel is a cloud-native, security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution.
Microsoft Sentinel (XDR integration)
Microsoft Sentinel is a cloud-native security information and event management (SIEM) service that provides intelligent security analytics for your entire enterprise at cloud scale.
Microsoft Teams playbooks
In Microsoft Teams, playbooks are a set of structured guides and automated workflows designed to help teams handle specific scenarios consistently.
Mimecast Email Security
A secure email gateway to block spam, viruses, and malware.
MISP
The default feed is available as a MISP feed. It can be added to an existing MISP instance by following MISP's documentation.
M&NTIS
M&NTIS is an Adversary Emulation and Cyber Range platform primarily used to test and validate a company's cybersecurity defenses.
MokN Baits
MokN helps detect malicious authentication activity by exposing login attempts captured on bait services.
Mokn Baits - Playbook actions
MokN helps detect malicious authentication activity by exposing login attempts captured on bait services.
MS Defender XDR - GraphAPI
Microsoft Defender XDR (formerly Microsoft 365 Defender) is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks.
MWDB
MWDB is a malware repository for automated malware collection and analysis systems hosted by CERT.pl.
Nanocorp
Nanocorp provides network observability and security events, offering centralized visibility and enhanced detection capabilities across the infrastructure.
NeroSwarm Honeypot
NeroSwarm Honeypot is a Deception-as-a-Service platform designed to deploy decoy systems across networks.
Netfilter
Netfilter is a framework provided by the Linux kernel that offers various functions and operations for packet filtering, network address translation, and port translation.
Netskope
Netskope is a cybersecurity company that provides solutions to protect data in cloud apps and network security while applying zero trust principles.
Netskope Log Streaming - Transaction Events
Netskope Log Streaming allows you to access all Netskope-generated logs directly within your preferred cloud storage and further SIEM tools without additional infrastructure.
Netskope Transaction Events
Netskope is a cybersecurity company that provides solutions to protect data in cloud apps and network security while applying zero trust principles.
New Relic
New Relic is a cloud-native observability platform for real-time monitoring of applications, infrastructure, logs, and metrics.
New Relic playbooks
New Relic is a cloud-based observability platform delivering full-stack monitoring for applications, infrastructure, logs and metrics.
Nozomi Central Management Console (CMC)
Nozomi Central Management Console is a centralized platform that streamlines the management of cybersecurity across industrial networks.
Nozomi Vantage
Nozomi Vantage is a comprehensive SaaS-based platform that delivers real-time visibility, threat detection, and incident response for industrial environments.
Nozomi Vantage - Asset connector (Devices)
Nozomi Vantage is a comprehensive SaaS-based platform that delivers real-time visibility, threat detection, and incident response for industrial environments. Designed for operational technology (OT) security, it enables organizations to monitor critical infrastructure and IoT devices effectively.
Nucleon EDR
Nucleon EDR is an Endpoint Detection & Response platform built on Zero-Trust principles and enhanced by AI-driven detection.
Nutanix Prism
Nutanix Prism is an intuitive management solution that provides a centralized interface for monitoring, managing, and optimizing multi-cloud environments.