MokN Baits
MokN helps detect malicious authentication activity by exposing login attempts captured on bait services.
Mokn Baits - Playbook actions
MokN helps detect malicious authentication activity by exposing login attempts captured on bait services.
MS Defender XDR - GraphAPI
Microsoft Defender XDR (formerly Microsoft 365 Defender) is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks.
MWDB
MWDB is a malware repository for automated malware collection and analysis systems hosted by CERT.pl.
Nanocorp
Nanocorp provides network observability and security events, offering centralized visibility and enhanced detection capabilities across the infrastructure.
NeroSwarm Honeypot
NeroSwarm Honeypot is a Deception-as-a-Service platform designed to deploy decoy systems across networks.
Netfilter
Netfilter is a framework provided by the Linux kernel that offers various functions and operations for packet filtering, network address translation, and port translation.
Netskope
Netskope is a cybersecurity company that provides solutions to protect data in cloud apps and network security while applying zero trust principles.
Netskope Log Streaming - Transaction Events
Netskope Log Streaming allows you to access all Netskope-generated logs directly within your preferred cloud storage and further SIEM tools without additional infrastructure.
Netskope Transaction Events
Netskope is a cybersecurity company that provides solutions to protect data in cloud apps and network security while applying zero trust principles.
New Relic
New Relic is a cloud-native observability platform for real-time monitoring of applications, infrastructure, logs, and metrics.
New Relic playbooks
New Relic is a cloud-based observability platform delivering full-stack monitoring for applications, infrastructure, logs and metrics.
Nozomi Central Management Console (CMC)
Nozomi Central Management Console is a centralized platform that streamlines the management of cybersecurity across industrial networks.
Nozomi Vantage
Nozomi Vantage is a comprehensive SaaS-based platform that delivers real-time visibility, threat detection, and incident response for industrial environments.
Nucleon EDR
Nucleon EDR is an Endpoint Detection & Response platform built on Zero-Trust principles and enhanced by AI-driven detection.
Nutanix Prism
Nutanix Prism is an intuitive management solution that provides a centralized interface for monitoring, managing, and optimizing multi-cloud environments.
OCSF
The OCSF (Open Cybersecurity Schema Framework) is an initiative to create a common, open-source set of data standards and schemas for cybersecurity threat information.
OGO WAF
OGO Shield Web Application Firewall provides protection and performance for your web applications and APIs.
Okta
Okta System log provides activity records related to your organization.
Okta - Asset connector (Devices)
Okta is a cloud-based identity and access management platform that provides secure authentication, authorization, and device management services.
Okta - Asset connector (Users)
Okta is a cloud-based identity and access management platform that provides secure authentication, authorization, and user management services.
Olfeo SAAS
Olfeo SaaS is a suite of cybersecurity features for analyzing, filtering and securing your web flows.
Olfeo Secure Web Gateway
Olfeo Secure Web Gateway is a suite of cybersecurity features for analyzing, filtering and securing your web flows.
One Identity Safeguard for Privileged Sessions (SPS)
One Identity Safeguard for Privileged Sessions (SPS) is a core module of the One Identity Safeguard suite that focuses on securing, monitoring, and auditing privileged access to critical systems.
Onyphe
Onyphe is a Cyber Defense Search Engine for open-source and cyber threat intelligence data collected by crawling various sources available on the Internet or by listening to Internet background noise.
OpenAI
The OpenAI API can be applied to virtually any task that involves understanding or generating natural language, code, or images.
OpenCTI - Collect Sekoia CTI database
The existing Sekoia connector for OpenCTI has been released in 2021 and is freely available on the OpenCTI Github repository.
OpenCTI - Import external IoCs to Sekoia Defend
The OpenCTI Sekoia.io Intel Stream Connector allows organizations to automatically feed their Sekoia.io IOC collections with threat intelligence from OpenCTI.
OpenLDAP
OpenLDAP (Lightweight Directory Access Protocol) is an open-source implementation of a directory service protocol.
OpenSSH
As of now, the main solution to collect OpenSSH logs leverages the Rsyslog recipe.