|
AADManagedIdentitySignInLogs |
Microsoft Entra ID |
Ja |
Ja |
|
AADNonInteractiveUserSignInLogs |
Microsoft Entra ID |
Ja |
Ja |
|
AADProvisioningLogs |
Microsoft Entra ID |
Ja |
Ja |
|
AADRiskyServicePrincipals |
Microsoft Entra ID |
Ja |
Ja |
|
AADRiskyUsers |
Microsoft Entra ID |
Ja |
Ja |
|
AADServicePrincipalRiskEvents |
Microsoft Entra ID |
Ja |
Ja |
|
AADServicePrincipalSignInLogs |
Microsoft Entra ID |
Ja |
Ja |
|
AADUserRiskEvents |
Microsoft Entra ID |
Ja |
Ja |
|
ABAPAuditLog |
Pathlock Inc.: Detectie en reactie op bedreigingen voor SAP
SAP S/4HANA Cloud Public Edition
SecurityBridge Solution voor SAP |
Ja |
Ja |
| ABNORMAL_CASES_CL |
AbnormalSecurity (met Azure Functions) |
Ja |
Ja |
| ABNORMAL_SECURITY_ABUSE_MAILBOX_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_ATO_CASE_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_AUDIT_LOG_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_CASE_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_LOGS_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_POSTURE_CHANGE_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_REMEDIATION_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_THREAT_LOG_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_SECURITY_VENDOR_CASE_CL |
Abnormale beveiliging (Push) |
Ja |
Ja |
| ABNORMAL_THREAT_MESSAGES_CL |
AbnormalSecurity (met Azure Functions) |
Ja |
Ja |
|
ADFSSignInLogs |
Microsoft Entra ID |
Ja |
Ja |
| ADOAuditLogs_CL |
Azure DevOps-auditlogboeken (via codeloze connectorplatform) |
Ja |
Ja |
| AgariBPAlertsLog_CL |
Fortra Agari Data Connector (via Codeless Connector Framework) |
Nee |
Nee |
| AirlockDigitalExecutionHistories |
Airlock Digital-connector (via Codeless Connector Framework) |
Nee |
Nee |
| AirlockDigitalFileActivitySamenvatting |
Airlock Digital-connector (via Codeless Connector Framework) |
Nee |
Nee |
| AirlockDigitalServerActiviteiten |
Airlock Digital-connector (via Codeless Connector Framework) |
Nee |
Nee |
| AIShield_CL |
AIShield |
Nee |
Nee |
| AkamaiSIEMEvent |
Akamai Security Events (via Codeless Connector Framework) |
Nee |
Nee |
|
AlertEvidence |
Microsoft Defender XDR |
Ja |
Ja |
| alertscompromisedcredentialdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsctepdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsdlpdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsmalsitedata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsmalwaredata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertspolicydata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsquarantinedata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsremediationdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertssecurityassessmentdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| alertsubadata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| AlibabaCloudVPCFlowLogs |
Alibaba Cloud Networking Data Connector (via Codeless Connector Framework) |
Nee |
Nee |
| AliCloud_CL |
AliCloud (met behulp van Azure Functions) |
Nee |
Nee |
| AliCloudActionTrailLogs_CL |
Alibaba Cloud ActionTrail (via Codeless Connector Framework) |
Ja |
Ja |
| Anvilogic_Alerts_CL |
Anvilogic |
Ja |
Ja |
| ApacheHTTPServer_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| apifirewall_log_1_CL |
API-bescherming |
Nee |
Nee |
| ARGOS_CL |
ARGOS Cloud Security |
Nee |
Nee |
| argsentdc_CL |
Check Point Cyberint Alerts Connector (via Codeless Connector Platform) |
Ja |
Ja |
| Armis_Activities_CL |
Activiteiten voor Armis-waarschuwingen (met behulp van Azure Functions) |
Ja |
Ja |
| Armis_Alerts_CL |
Activiteiten voor Armis-waarschuwingen (met behulp van Azure Functions) |
Ja |
Ja |
| Armis_Devices_CL |
Armis-apparaten (met Azure Functions) |
Nee |
Nee |
|
ASimAuditEventLogs |
Workday-gebruikersactiviteit |
Ja |
Ja |
|
ASimDnsActivityLogs |
Windows DNS-gebeurtenissen via AMA |
Ja |
Ja |
| atlassian_beacon_alerts_CL |
Atlassian Beacon-waarschuwingen |
Nee |
Nee |
| AtlassianAuditEvents |
Atlassian Organization Audit-evenementen (via Codeless Connector Framework) |
Nee |
Nee |
| Audit_CL |
Mimecast-audit |
Ja |
Ja |
|
AuditLogs |
Microsoft Entra ID |
Ja |
Ja |
| Audits_Data_CL |
Vectra XDR (met Azure Functions) |
Ja |
Ja |
| Auth0AM_CL |
[AFGESCHAFT] Auth0-logboeken (met Azure-functie) (met behulp van Azure Functions) |
Ja |
Ja |
| Auth0Logs_CL |
Auth0-logboeken (via Codeless Connector Framework) |
Ja |
Ja |
| Awareness_Performance_Details_CL |
Mimecast bewustwordingstraining |
Ja |
Ja |
| Awareness_SafeScore_Details_CL |
Mimecast bewustwordingstraining |
Ja |
Ja |
| Awareness_User_Data_CL |
Mimecast bewustwordingstraining |
Ja |
Ja |
| Awareness_Watchlist_Details_CL |
Mimecast bewustwordingstraining |
Ja |
Ja |
| AWSALBAccessLogsData |
Elastische taakverdeling van Amazon Web Services (via Codeless Connector Framework) |
Nee |
Nee |
| AWSCloudFront_AccessLog_CL |
Amazon Web Services CloudFront (via Codeless Connector Framework) (preview) |
Ja |
Ja |
|
AWSCloudTrail |
Amazon Web Services S3
Amazon Web Services |
Ja |
Ja |
|
AWSCloudWatch |
Amazon Web Services S3 |
Ja |
Ja |
| AWSEKSLogs_CL |
AWS EKS-gegevensconnector (via Codeless Connector Framework) |
Ja |
Ja |
|
AWSGuardDuty |
Amazon Web Services S3 |
Ja |
Ja |
|
AWSNetworkFirewallFlow |
Amazon Web Services NetworkFirewall (via Codeless Connector Framework) |
Ja |
Ja |
|
AWSRoute53Resolver |
Amazon Web Services S3 DNS Route53 (via Codeless Connector Framework) |
Ja |
Ja |
|
AWSS3ServerAccess |
AWS S3 Server Access Logs (via Codeless Connector Framework) |
Ja |
Ja |
|
AWSSecurityHubFindings |
AWS Security Hub Bevindingen (via Codeless Connector Framework) |
Ja |
Ja |
|
AWSVPCFlow |
Amazon Web Services S3 |
Ja |
Ja |
|
AWSWAF |
Amazon Web Services S3 WAF |
Ja |
Ja |
|
AZFWApplicationRule |
Azure Firewall |
Ja |
Ja |
|
AZFWDnsQuery |
Azure Firewall |
Ja |
Ja |
|
AZFWFatFlow |
Azure Firewall |
Ja |
Ja |
|
AZFWFlowTrace |
Azure Firewall |
Ja |
Ja |
|
AZFWIdpsSignature |
Azure Firewall |
Ja |
Ja |
|
AZFWInternalFqdnResolutionFailure |
Azure Firewall |
Ja |
Ja |
|
AZFWNatRule |
Azure Firewall |
Ja |
Ja |
|
AZFWNetworkRule |
Azure Firewall |
Ja |
Ja |
|
AZFWThreatIntel |
Azure Firewall |
Ja |
Ja |
|
AzureActivity |
Azure-activiteit |
Nee |
Nee |
|
AzureDiagnostics |
Azure Batch-account
Azure Cognitive Search
Azure DDoS-beveiliging
Azure Event Hub
Azure Firewall
Azure Key Vault
Azure Kubernetes Service (AKS)
Azure Logic Apps
Azure SQL databases
Azure Service Bus
Azure Stream Analytics
Azure Web Application Firewall (WAF)
Netwerkbeveiligingsgroepen |
Nee |
Nee |
|
AzureMetrics |
Azure opslagaccount |
Nee |
Nee |
| BetterMTDAppLog_CL |
BETTER Mobiele Dreigingsverdediging (MTD) |
Nee |
Nee |
| BetterMTDDeviceLog_CL |
BETTER Mobiele Dreigingsverdediging (MTD) |
Nee |
Nee |
| BetterMTDIncidentLog_CL |
BETTER Mobiele Dreigingsverdediging (MTD) |
Nee |
Nee |
| BetterMTDNetflowLog_CL |
BETTER Mobiele Dreigingsverdediging (MTD) |
Nee |
Nee |
| BeyondTrustPM_ActivityAudits_CL |
BeyondTrust PM Cloud |
Ja |
Ja |
| BeyondTrustPM_ClientEvents_CL |
BeyondTrust PM Cloud |
Ja |
Ja |
| BigIDDSPMCatalog_CL |
BigID DSPM-connector |
Nee |
Nee |
| BitglassLogs_CL |
Bitglass (met Azure Functions) |
Nee |
Nee |
| BitwardenEventLogs |
Bitwarden-gebeurtenislogboeken |
Nee |
Nee |
| blacklens_CL |
blacklens.io |
Ja |
Ja |
| BoxEvents_CL |
[UITGELOPEN] Box Events (met Azure Function) (met Azure Functions) |
Nee |
Nee |
| BoxEventsV2_CL |
Box Events (via Codeless Connector Framework) |
Ja |
Ja |
| BV_ClaudeCompliance_ComplianceActivities_CL |
BV-ClaudeCompliance (via Codeless Connector Framework) |
Ja |
Ja |
| CarbonBlack_Alerts_CL |
VMware Carbon Black Cloud via AWS S3 (via Codeless Connector Framework) |
Nee |
Nee |
| CarbonBlackAuditLogs_CL |
[AFGESCHAFT] VMware Carbon Black Cloud (met Azure-functie) (met behulp van Azure Functions) |
Nee |
Nee |
| CarbonBlackEvents_CL |
[AFGESCHAFT] VMware Carbon Black Cloud (met Azure-functie) (met behulp van Azure Functions) |
Nee |
Nee |
| CarbonBlackNotifications_CL |
[AFGESCHAFT] VMware Carbon Black Cloud (met Azure-functie) (met behulp van Azure Functions) |
Nee |
Nee |
| CBSLog_AzureV2_CL |
CTM360 CyberBlindSpot (serverloos) |
Ja |
Ja |
| CheckPointEmailSecAntiPhishingExceptions_CL |
Check Point E-mailbeveiliging (via Codeless Connector Framework) |
Ja |
Ja |
| CheckPointEmailSecurityAuditLogs_CL |
Check Point E-mailbeveiliging (via Codeless Connector Framework) |
Ja |
Ja |
| CheckPointEmailSecurityEvents_CL |
Check Point E-mailbeveiliging (via Codeless Connector Framework) |
Ja |
Ja |
| CheckPointEmailSecuritySpamExceptions_CL |
Check Point E-mailbeveiliging (via Codeless Connector Framework) |
Ja |
Ja |
| Cisco_Umbrella_audit_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| Cisco_Umbrella_cloudfirewall_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Ja |
Ja |
| Cisco_Umbrella_dlp_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| Cisco_Umbrella_dns_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Ja |
Ja |
| Cisco_Umbrella_fileevent_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| Cisco_Umbrella_firewall_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Ja |
Ja |
| Cisco_Umbrella_intrusion_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| Cisco_Umbrella_ip_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Ja |
Ja |
| Cisco_Umbrella_proxy_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Ja |
Ja |
| Cisco_Umbrella_ravpnlogs_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| Cisco_Umbrella_ztaflow_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| Cisco_Umbrella_ztna_CL |
Cisco Cloud Security (met Azure Functions)
Cisco Cloud Security (met een elastisch Premium-abonnement) (met behulp van Azure Functions) |
Nee |
Nee |
| CiscoDuo_CL |
Cisco Duo Security (met behulp van Azure Functions) |
Nee |
Nee |
| CiscoETD_CL |
Cisco ETD |
Nee |
Nee |
| CiscoETDv2_CL |
Cisco E-maildreigingsverdediging (ETD) |
Ja |
Ja |
| CiscoMerakiOrganizations_CL |
Cisco Meraki Events (gebruikmakend van REST API) (via Codeless Connector Framework) |
Ja |
Ja |
| CiscoSDWANNetflow_CL |
Cisco Software Defined WAN |
Nee |
Nee |
| CiscoSecureEndpointAuditLogsV2_CL |
Cisco Secure Endpoint (via Codeless Connector Framework) |
Ja |
Ja |
| CiscoSecureEndpointEventsV2_CL |
Cisco Secure Endpoint (via Codeless Connector Framework) |
Ja |
Ja |
| CiscoUmbrellaAdminAudit_CL |
Cisco Umbrella (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixAnalytics_CVAD_Events_V1_CL |
Citrix Analytics (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixAnalytics_indicatorEventDetails_V1_CL |
Citrix Analytics (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixAnalytics_indicatorSummary_V1_CL |
Citrix Analytics (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixAnalytics_riskScoreChange_V1_CL |
Citrix Analytics (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixAnalytics_SPA_Events_V1_CL |
Citrix Analytics (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixAnalytics_userProfile_V1_CL |
Citrix Analytics (via Codeless Connector Framework) |
Ja |
Ja |
| CitrixDaaSConfigOps_CL |
Citrix DaaS Audit & Sessies (via Codeless Connector Framework) |
Nee |
Nee |
| CitrixDaaSSessions_CL |
Citrix DaaS Audit & Sessies (via Codeless Connector Framework) |
Nee |
Nee |
| Cloud_Integrated_CL |
Mimecast Cloud Geïntegreerd |
Ja |
Ja |
|
CloudAppEvents |
Microsoft Defender XDR |
Ja |
Ja |
| Cloudflare_CL |
Cloudflare (preview) (met behulp van Azure Functions) |
Ja |
Ja |
| CloudflareV2_CL |
Cloudflare (blobcontainer gebruiken) (via het connectorframework zonder code) |
Ja |
Ja |
| CloudGuard_SecurityEvents_CL |
Check Point CloudGuard CNAPP Connector voor Microsoft Sentinel |
Ja |
Ja |
| CognniIncidents_CL |
Cognni |
Ja |
Ja |
| Cohesity_CL |
Samenhang (met behulp van Azure Functions) |
Ja |
Ja |
|
CommonSecurityLog |
Cisco ASA/FTD via AMA
Claroty xDome
Infoblox Cloud Data Connector via AMA
Infoblox SOC Insight-gegevensconnector via AMA
Silverfort Beheer Console
VirtualMetric DataStream voor Microsoft Sentinel data lake
VirtualMetric DataStream voor Microsoft Sentinel
VirtualMetric Director-proxy
Zscaler Internet Access Cloud NSS Audit Log Push Connector
Zscaler Internet Access Cloud NSS CASB Activity Log Push Connector
Zscaler Internet Access Cloud NSS CASB CRM Log Push Connector
Zscaler Internet Access Cloud NSS CASB Cloud Storage Log Push Connector
Zscaler Internet Access Cloud NSS CASB Collaboration Log Push Connector
Zscaler Internet Access Cloud NSS CASB E-maillog Push Connector
Zscaler Internet Access Cloud NSS CASB File Sharing Log Push Connector
Zscaler Internet Access Cloud NSS CASB ITSM Log Push Connector
Zscaler Internet Access Cloud NSS CASB Repo Log Push Connector
Zscaler Internet Access Cloud NSS DNS Log Push Connector
Zscaler Internet Access Cloud NSS E-mail DLP log Push Connector
Zscaler Internet Access Cloud NSS Endpoint DLP Log Push Connector
Zscaler Internet Access Cloud NSS Firewall Log Push Connector
Zscaler Internet Access Cloud NSS Tunnel Log Push Connector
Zscaler Internet Access Cloud NSS Web Log Push Connector
[Afgeschaft] Infoblox SOC Insight-gegevensconnector via verouderde agent |
Ja |
Ja |
| CommvaultAlerts_CL |
CommvaultSecurityIQ |
Ja |
Ja |
| CommvaultAlertsCCF_CL |
Commvault Security IQ (via Codeless Connector Framework) |
Nee |
Nee |
| ConfluenceAuditLogs_CL |
Atlassian Confluence Audit (via Codeless Connector Framework) |
Ja |
Ja |
| ContrastADRAttackEvents_CL |
Contrast ADR Push Connector |
Ja |
Ja |
| ContrastADRIncidents_CL |
Contrast ADR Push Connector |
Ja |
Ja |
|
CopilotActivity |
Microsoft Copilot |
Nee |
Ja |
| Corelight |
Corelight Connector Exporteren |
Nee |
Nee |
| CortexXDR_Incidents_CL |
Cortex XDR - Incidenten |
Ja |
Ja |
| CortexXpanseAlerts_CL |
Palo Alto Cortex Xpanse (via Codeless Connector Framework) |
Ja |
Ja |
| CriblInternal_CL |
Cribl |
Nee |
Nee |
| CrowdStrike_Additional_Events_CL |
CrowdStrike Falcon Data Replicator (Gebruikersbeheerd AWS-S3) (via Codeless Connector Framework) |
Ja |
Ja |
|
CrowdStrikeAlerts |
CrowdStrike API Data Connector (via Codeless Connector Framework) |
Ja |
Ja |
| CrowdStrikeReplicatorV2 |
CrowdStrike Falcon Data Replicator (CrowdStrike Managed AWS-S3) (met behulp van Azure Functions) |
Nee |
Nee |
| CyberArk_AuditEvents_CL |
CyberArk Audit
CyberArkAudit (met behulp van Azure Functions) |
Ja |
Ja |
| CyberArk_EPMEvents_CL |
CyberArk EPM |
Ja |
Ja |
| CyberArkEPM_Events_CL |
CyberArkEPM (met behulp van Azure Functions) |
Nee |
Nee |
| CyberpionActionItems_CL |
IONIX-beveiligingslogboeken (via Codeless Connector Framework)
[AFGESCHAFT] IONIX-beveiligingslogboeken (push) |
Ja |
Ja |
| CyberSixgill_Alerts_CL |
Cybersixgill Actionable Alerts (met behulp van Azure Functions) |
Nee |
Nee |
| CybleVisionAlerts_CL |
Cyble Vision-waarschuwingen |
Nee |
Nee |
| CyeraAssets_CL |
Cyera DSPM Microsoft Sentinel-gegevensconnector |
Nee |
Nee |
| CyeraAssets_MS_CL |
Cyera DSPM Microsoft Sentinel-gegevensconnector |
Nee |
Nee |
| CyeraClassifications_CL |
Cyera DSPM Microsoft Sentinel-gegevensconnector |
Nee |
Nee |
| CyeraIdentities_CL |
Cyera DSPM Microsoft Sentinel-gegevensconnector |
Nee |
Nee |
| CyeraIssues_CL |
Cyera DSPM Microsoft Sentinel-gegevensconnector |
Nee |
Nee |
| CyfirmaASCertificatesAlerts_CL |
CYFIRMA-aanvalsoppervlak |
Ja |
Ja |
| CyfirmaASCloudWeaknessAlerts_CL |
CYFIRMA-aanvalsoppervlak |
Ja |
Ja |
| CyfirmaASConfigurationAlerts_CL |
CYFIRMA-aanvalsoppervlak |
Ja |
Ja |
| CyfirmaASDomainIPReputationAlerts_CL |
CYFIRMA-aanvalsoppervlak |
Ja |
Ja |
| CyfirmaASDomainIPVulnerabilityAlerts_CL |
CYFIRMA-aanvalsoppervlak |
Ja |
Ja |
| CyfirmaASOpenPortsAlerts_CL |
CYFIRMA-aanvalsoppervlak |
Ja |
Ja |
| CyfirmaBIDomainITAssetAlerts_CL |
CYFIRMA Merkinformatie |
Ja |
Ja |
| CyfirmaBIExecutivePeopleAlerts_CL |
CYFIRMA Merkinformatie |
Ja |
Ja |
| CyfirmaBIMaliciousMobileAppsAlerts_CL |
CYFIRMA Merkinformatie |
Ja |
Ja |
| CyfirmaBIProductSolutionAlerts_CL |
CYFIRMA Merkinformatie |
Ja |
Ja |
| CyfirmaBISocialHandlersAlerts_CL |
CYFIRMA Merkinformatie |
Ja |
Ja |
| CyfirmaCampaigns_CL |
CYFIRMA Cyber Inlichtingen |
Ja |
Ja |
| CyfirmaCompromisedAccounts_CL |
MET CYFIRMA gecompromitteerde accounts |
Ja |
Ja |
| CyfirmaDBWMDarkWebAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaDBWMPhishingAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaDBWMRansomwareAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaIndicators_CL |
CYFIRMA Cyber Inlichtingen |
Ja |
Ja |
| CyfirmaMalware_CL |
CYFIRMA Cyber Inlichtingen |
Ja |
Ja |
| CyfirmaSPEConfidentialFilesAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaSPEPIIAndCIIAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaSPESocialThreatAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaSPESourceCodeAlerts_CL |
CYFIRMA Digital Risk |
Ja |
Ja |
| CyfirmaThreatActors_CL |
CYFIRMA Cyber Inlichtingen |
Ja |
Ja |
| CyfirmaVulnerabilities_CL |
CYFIRMA Kwetsbaarheden Intelligentie |
Ja |
Ja |
| Cymru_Scout_Account_Usage_Data_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_Domain_Data_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Communications_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Details_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Fingerprints_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Foundation_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_OpenPorts_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_PDNS_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Summary_Certs_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Summary_Details_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Summary_Fingerprints_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Summary_OpenPorts_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_Summary_PDNS_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| Cymru_Scout_IP_Data_x509_CL |
Team Cymru Scout Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
| CynerioEvent_CL |
Cynerio-beveiligingsevenementen |
Nee |
Nee |
| Cyren_Indicators_CL |
Cyren Dreigingsintelligentie |
Nee |
Nee |
| D3SOARIncidents_CL |
D3 Smart SOAR-incidenten |
Nee |
Nee |
| darktrace_model_alerts_CL |
Darktrace Connector voor Microsoft Sentinel REST API (Legacy) |
Ja |
Ja |
| DarktraceASM_CL |
Darktrace ActiveAI Security Platform Connector |
Ja |
Ja |
| DarktraceEMAIL_CL |
Darktrace ActiveAI Security Platform Connector |
Ja |
Ja |
| DarktraceIncidents_CL |
Darktrace ActiveAI Security Platform Connector |
Ja |
Ja |
| DarktraceModelAlerts_CL |
Darktrace ActiveAI Security Platform Connector |
Ja |
Ja |
| DarktraceResponseActions_CL |
Darktrace ActiveAI Security Platform Connector |
Ja |
Ja |
| DarktraceSystemStatusAlerts_CL |
Darktrace ActiveAI Security Platform Connector |
Ja |
Ja |
| databahn_alerts_CL |
DataBahn |
Nee |
Nee |
| databahn_audit_logs_CL |
DataBahn |
Nee |
Nee |
| databahn_device_inventory_CL |
DataBahn |
Nee |
Nee |
| DataminrPulse_Alerts_CL |
Dataminr Pulse Alerts Data Connector (met behulp van Azure Functions) |
Nee |
Nee |
|
DataverseActivity |
Microsoft Dataverse |
Ja |
Ja |
| datawizaserveraccess_CL |
Datawiza DAP |
Nee |
Nee |
| Detections_Data_CL |
Vectra XDR (met Azure Functions) |
Ja |
Ja |
|
DeviceEvents |
Microsoft Defender XDR |
Ja |
Ja |
| DigitalShadows_V2_CL |
Digitale Schaduwen Zoeklicht |
Nee |
Nee |
|
DnsEvents |
DNS |
Ja |
Ja |
|
DnsInventory |
DNS |
Ja |
Ja |
| DoppelTable_CL |
Doppel-gegevensconnector |
Nee |
Nee |
| dossier_atp_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_atp_threat_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_dns_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_geo_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_infoblox_web_cat_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_inforank_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_malware_analysis_v3_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_nameserver_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_nameserver_matches_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_ptr_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_rpz_feeds_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_rpz_feeds_records_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_threat_actor_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_tld_risk_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_whitelist_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| dossier_whois_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| DragosAlerts_CL |
Dragos-meldingen via cloudsitestore |
Ja |
Ja |
| DruvaSecurityEvents_CL |
Druva Events Connector |
Ja |
Ja |
| Dynamics365Activity |
Dynamics365 |
Ja |
Nee |
| DynatraceAttacks_CL |
Dynatrace-aanvallen V1 |
Nee |
Nee |
| DynatraceAttacksV2_CL |
Dynatrace Valt V2 aan |
Nee |
Nee |
| DynatraceAuditLogs_CL |
Dynatrace-auditlogboeken V1 |
Ja |
Ja |
| DynatraceAuditLogsV2_CL |
Dynatrace-auditlogboeken V2 |
Nee |
Nee |
| DynatraceProblems_CL |
Dynatrace-problemen V1 |
Nee |
Nee |
| DynatraceProblemsV2_CL |
Dynatrace-problemen V2 |
Ja |
Ja |
| DynatraceSecurityProblems_CL |
Dynatrace Runtime-beveiligingsproblemen V1 |
Nee |
Nee |
| DynatraceSecurityProblemsV2_CL |
Dynatrace Runtime-beveiligingsproblemen V2 |
Nee |
Nee |
| ElasticAgentEvent |
Elastische agent |
Nee |
Nee |
| ElasticAgentLogsV2_CL |
Elastische agent (via Codeless Connector Framework) |
Nee |
Nee |
|
EmailEvents |
Microsoft Defender XDR |
Ja |
Ja |
| Entities_Data_CL |
Vectra XDR (met Azure Functions) |
Ja |
Ja |
| Entity_Scoring_Data_CL |
Vectra XDR (met Azure Functions) |
Ja |
Ja |
| ErmesBrowserSecurityEvents_CL |
Ermes Browser Beveiligingsgebeurtenissen |
Ja |
Ja |
| ESIExchangeConfig_CL |
Exchange Security Insights On-Premises Collector |
Nee |
Nee |
| ESIExchangeOnlineConfig_CL |
Exchange Security Insights Online Collector (met behulp van Azure Functions) |
Nee |
Nee |
|
Gebeurtenis |
Geautomatiseerde logische webCTRL
Microsoft Exchange Beheer auditlogboeken per gebeurtenislogboek
Microsoft Exchange-logboeken en -gebeurtenissen
[Afgeschaft] Microsoft Exchange-logboeken en -gebeurtenissen |
Ja |
Nee |
| eventsapplicationdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| eventsauditdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| eventsconnectiondata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| eventsincidentdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| eventsnetworkdata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| eventspagedata_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| ExchangeHttpProxy_CL |
Microsoft Exchange HTTP-proxylogboeken
[Afgeschaft] Microsoft Exchange-logboeken en -gebeurtenissen |
Ja |
Ja |
| ExtraHop_Detections_CL |
ExtraHop Detectie Data Connector |
Nee |
Nee |
| F5Telemetry_ASM_CL |
F5 BIG-IP |
Nee |
Nee |
| F5Telemetry_LTM_CL |
F5 BIG-IP |
Nee |
Nee |
| F5Telemetry_system_CL |
F5 BIG-IP |
Ja |
Ja |
| Failed_Range_To_Ingest_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| feedly_indicators_CL |
Feedly IoC |
Nee |
Nee |
| FilewallExchange_CL |
Filewall voor Microsoft 365 |
Ja |
Ja |
| FinanceOperationsActivity_CL |
Dynamics 365 Finance en bewerkingen |
Ja |
Ja |
| FireworkV2_CL |
Flare Push-connector |
Ja |
Ja |
| fluentbit_CL |
Azure CloudNGFW by Palo Alto Networks |
Ja |
Ja |
| ForcepointDLPEvents_CL |
Forcepoint DLP |
Nee |
Nee |
| ForescoutEvent |
Forescout |
Nee |
Nee |
| ForescoutHostProperties_CL |
Forescout Host Property Monitor |
Ja |
Ja |
| FortinetFortiNdrCloudRaw_CL |
Fortinet FortiNDR Cloud |
Nee |
Nee |
| FortyTwoCrunchAPIProtectionV2 |
42Crunch API-bescherming (Push Connector via Codeless Connector Framework) |
Nee |
Nee |
| GambitPoliciesIssues_CL |
Gambit Beveiligingsbeleid Problemen (Push) |
Nee |
Nee |
| Garrison_ULTRARemoteLogs_CL |
Garrison ULTRA Remote Logs (met behulp van Azure Functions) |
Nee |
Nee |
|
GCPApigee |
Google ApigeeX (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPAuditLogs |
GCP Pub/Sub AuditLogboeken |
Ja |
Ja |
|
GCPCDN |
Google Cloud Platform CDN (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPCloudRun |
GCP Cloud Run (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPCloudSQL |
GCP Cloud SQL (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPComputeEngine |
Google Cloud Platform Compute Engine (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPDNS |
Google Cloud Platform DNS (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPIAM |
Google Cloud Platform IAM (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPIDS |
Google Cloud Platform Cloud IDS (via Codeless Connector Framework) |
Ja |
Ja |
| GCPLoadBalancerLogs_CL |
GCP Pub/Sub Load Balancer-logboeken (via platform zonder code). |
Ja |
Ja |
|
GCPMonitoring |
Google Cloud Platform Cloud Monitoring (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPNAT |
Google Cloud Platform NAT (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPNATAudit |
Google Cloud Platform NAT (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPResourceManager |
Google Cloud Platform Resource Manager (via Codeless Connector Framework) |
Ja |
Ja |
|
GCPVPCFlow |
GCP Pub/Sub VPC-stroomlogboeken (via het connectorframework zonder code) |
Ja |
Ja |
| GigamonV2_CL |
Gigamon AMX-connector |
Nee |
Nee |
| GitHubAdvancedSecurityAlerts_CL |
GitHub (met webhooks) V2 |
Ja |
Ja |
| GitHubAuditLogPolling_CL |
[Afgeschaft] GitHub Enterprise-auditlogboek |
Ja |
Ja |
| GitHubAuditLogsV2_CL |
GitHub Ondernemingscontrolelogboek (via Azure Storage)
GitHub Enterprise Auditlog (via Codeless Connector Framework) |
Ja |
Ja |
| githubscanaudit_CL |
GitHub (met webhooks) |
Ja |
Ja |
|
GKEAudit |
Google Kubernetes Engine (via Codeless Connector Framework) |
Ja |
Ja |
|
GoogleCloudSCC |
Google Security Command Center |
Ja |
Ja |
|
GoogleWorkspaceReports |
Google Workspace-activiteiten (via Codeless Connector Framework) |
Ja |
Ja |
| GzSecurityEvents_CL |
GravityZone-gegevensconnector |
Ja |
Ja |
| HackerViewLog_AzureV2_CL |
CTM360 HackerView (serverloos) |
Ja |
Ja |
| HalcyonAlertUpdatesV2_CL |
Halcyon-connector (v2) |
Ja |
Ja |
| HalcyonEventsV2_CL |
Halcyon-connector (v2) |
Ja |
Ja |
| Health_Data_CL |
Vectra XDR (met Azure Functions) |
Ja |
Ja |
|
IdentityLogonEvents |
Microsoft Defender XDR |
Ja |
Ja |
| Illumio_Auditable_Events_CL |
Illumio SaaS (met behulp van Azure Functions) |
Ja |
Ja |
| Illumio_Flow_Events_CL |
Illumio SaaS (met behulp van Azure Functions) |
Ja |
Ja |
| IllumioInsights_CL |
Illumio Insights |
Ja |
Ja |
| IllumioInsightsGraph |
Illumio Insights-grafiek |
Nee |
Nee |
| IllumioInsightsSummary_CL |
Samenvatting van Illumio Insights |
Nee |
Nee |
| ImpervaWAFCloud |
Imperva Cloud WAF (via Codeless Connector Framework) |
Nee |
Nee |
| ImpervaWAFCloud_CL |
Imperva Cloud WAF (met behulp van Azure Functions) |
Ja |
Ja |
| Infoblox_Failed_Indicators_CL |
Infoblox-gegevensconnector via REST API |
Nee |
Nee |
| InfobloxInsight_CL |
Infoblox SOC Insight Data Connector via REST API |
Nee |
Nee |
| InfoSecAnalytics_CL |
InfoSecGlobal-gegevensconnector |
Nee |
Nee |
| IntegrationTable_CL |
ESET Protect Platform (met behulp van Azure Functions) |
Ja |
Ja |
| IntegrationTableIncidents_CL |
ESET Protect Platform (met behulp van Azure Functions) |
Ja |
Ja |
| iocsent_CL |
Check Point Cyberint IOC-connector |
Ja |
Ja |
| Ipinfo_Abuse_CL |
IPinfo Abuse Data Connector |
Nee |
Nee |
| Ipinfo_ASN_CL |
IPinfo ASN-gegevensconnector |
Nee |
Nee |
| Ipinfo_Carrier_CL |
IPinfo Carrier Data Connector |
Nee |
Nee |
| Ipinfo_Company_CL |
IPinfo-connector voor bedrijfsgegevens |
Nee |
Nee |
| Ipinfo_CORE_CL |
IPinfo Core Data Connector |
Nee |
Nee |
| Ipinfo_Country_CL |
IPinfo Country ASN-gegevensconnector |
Nee |
Nee |
| Ipinfo_Domain_CL |
IPinfo Domein Data Connector |
Nee |
Nee |
| Ipinfo_Location_CL |
IPinfo Iplocation-gegevensconnector |
Nee |
Nee |
| Ipinfo_Location_extended_CL |
IPinfo Iplocation Uitgebreide Data Connector |
Nee |
Nee |
| Ipinfo_PLUS_CL |
IPinfo Plus-gegevensconnector |
Nee |
Nee |
| Ipinfo_Privacy_CL |
IPinfo-connector voor privacygegevens |
Nee |
Nee |
| Ipinfo_Privacy_extended_CL |
IPinfo Privacy Uitgebreide Data Connector |
Nee |
Nee |
| Ipinfo_RESIDENTIAL_PROXY_CL |
IPinfo ResProxy-gegevensconnector |
Nee |
Nee |
| Ipinfo_RIRWHOIS_CL |
IPinfo RIRWHOIS-gegevensconnector |
Nee |
Nee |
| Ipinfo_RWHOIS_CL |
IPinfo RWHOIS-gegevensconnector |
Nee |
Nee |
| Ipinfo_WHOIS_ASN_CL |
IPinfo WHOIS ASN-gegevensconnector |
Nee |
Nee |
| Ipinfo_WHOIS_MNT_CL |
IPinfo WHOIS MNT-gegevensconnector |
Nee |
Nee |
| Ipinfo_WHOIS_NET_CL |
IPinfo WHOIS NET Data Connector |
Nee |
Nee |
| Ipinfo_WHOIS_ORG_CL |
IPinfo WHOIS ORG-gegevensconnector |
Nee |
Nee |
| Ipinfo_WHOIS_POC_CL |
IPinfo WHOIS POC-gegevensconnector |
Nee |
Nee |
| Island_Admin_CL |
Island Enterprise Browser Beheer Events (verouderd) |
Ja |
Ja |
| Island_User_CL |
Island Enterprise Browser User Events (verouderd) |
Ja |
Ja |
| Island_UserEvents_V2_CL |
Island Enterprise Browser V2 |
Ja |
Ja |
| jamfprotectalerts_CL |
Jamf Protect Push-connector |
Ja |
Ja |
| jamfprotecttelemetryv2_CL |
Jamf Protect Push-connector |
Ja |
Ja |
| jamfprotectunifiedlogs_CL |
Jamf Protect Push-connector |
Ja |
Ja |
| JBossEvent_CL |
Aangepaste logboeken via AMA |
Nee |
Nee |
| Jira_Audit_CL |
Atlassian Jira Audit (met behulp van Azure Functions) |
Nee |
Nee |
| Jira_Audit_v2_CL |
Atlassian Jira Audit (via Codeless Connector Framework) |
Ja |
Ja |
| JuniperIDP_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| KeeperSecurityEventNewLogs_CL |
Keeper Security Push Connector |
Ja |
Ja |
| LastPassNativePoller_CL |
LastPass Enterprise - Rapportage (Polling CCP) |
Ja |
Ja |
| LightningAttackPaths_CL |
Semperis Lightning-logboeken |
Nee |
Nee |
| LightningIOEResults_CL |
Semperis Lightning-logboeken |
Nee |
Nee |
| LightningTier0Nodes_CL |
Semperis Lightning-logboeken |
Nee |
Nee |
| Lockdown_Data_CL |
Vectra XDR (met Azure Functions) |
Ja |
Ja |
| Lookout_CL |
[AFGESCHAFT] Uitkijk |
Nee |
Nee |
| LookoutMtdV2_CL |
Lookout Mobile Threat Detection Connector (via Codeless Connector Framework) (preview) |
Ja |
Ja |
| MailGuard365_Threats_CL |
MailGuard 365 |
Ja |
Ja |
| MailRiskEventEmails_CL |
MailRisk door Secure Practice |
Ja |
Ja |
| MarkLogicAudit_CL |
Aangepaste logboeken via AMA |
Nee |
Nee |
| McasShadowItReporting |
Microsoft Defender voor Cloud Applicaties |
Nee |
Nee |
| MDBALogTable_CL |
MongoDB Atlas-logboeken |
Ja |
Ja |
| meraki_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| meshStackEventLogs_CL |
meshStack-gebeurtenislogboeken |
Nee |
Nee |
| MessageTrackingLog_CL |
Microsoft Exchange-logboeken voor het bijhouden van berichten
[Afgeschaft] Microsoft Exchange-logboeken en -gebeurtenissen |
Ja |
Ja |
|
MicrosoftPurviewInformationProtection |
Microsoft Purview Informatiebeveiliging |
Ja |
Ja |
| MimecastAudit_CL |
Mimecast Audit & Authentication (met behulp van Azure Functions) |
Nee |
Nee |
| MimecastDLP_CL |
Mimecast Secure Email Gateway (met behulp van Azure Functions) |
Nee |
Nee |
| MimecastSIEM_CL |
Mimecast Secure Email Gateway (met behulp van Azure Functions) |
Nee |
Nee |
| MimecastTTPAttachment_CL |
Mimecast Targeted Threat Protection (met behulp van Azure Functions) |
Nee |
Nee |
| MimecastTTPImpersonation_CL |
Mimecast Targeted Threat Protection (met behulp van Azure Functions) |
Nee |
Nee |
| MimecastTTPUrl_CL |
Mimecast Targeted Threat Protection (met behulp van Azure Functions) |
Nee |
Nee |
| MongoDBAudit_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| MuleSoft_Cloudhub_CL |
MuleSoft Cloudhub |
Nee |
Nee |
| MulesoftCloudhubAlerts_CL |
Mulesoft CloudHub Alerts Connector (via Codeless Connector Framework) |
Ja |
Ja |
| MuleSoftCloudhubLogs |
MuleSoft CloudHub-logs (Push Connector via Codeless Connector Framework) |
Nee |
Nee |
| NCProtectUAL_CL |
NC Protect |
Nee |
Nee |
| net_assets_CL |
Holm Security Asset Data (met behulp van Azure Functions) |
Nee |
Nee |
| Netskope_WebTx_metrics_CL |
Netskope-gegevensconnector |
Nee |
Nee |
| NetskopeAlerts_CL |
Netskope-waarschuwingen en -gebeurtenissen |
Ja |
Ja |
| NetskopeWebTransactions_CL |
Netskope Web Transaction Connector (via Blob Storage) |
Ja |
Ja |
| NetskopeWebtxData_CL |
Netskope Web Transactions Data Connector |
Nee |
Nee |
| NetskopeWebtxErrors_CL |
Netskope Web Transactions Data Connector |
Nee |
Nee |
|
NetworkAccessTraffic |
Microsoft Entra ID |
Ja |
Ja |
| NexposeInsightVMCloud_assets_CL |
Rapid7 Insight Platform-rapporten voor beveiligingsbeheer (met behulp van Azure Functions) |
Nee |
Nee |
| NexposeInsightVMCloud_vulnerabilities_CL |
Rapid7 Insight Platform-rapporten voor beveiligingsbeheer (met behulp van Azure Functions) |
Nee |
Nee |
| NGINX_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| NordPassEventLogs_CL |
NordPass |
Ja |
Ja |
| NordStellar_CL |
NordStellar (Push) |
Nee |
Nee |
| ObsidianActivity_CL |
Obsidian Datasharing-connector |
Nee |
Nee |
| ObsidianThreat_CL |
Obsidian Datasharing-connector |
Nee |
Nee |
| OCI_LogsV2_CL |
Oracle Cloud Infrastructuur (via Codeless Connector Framework) |
Ja |
Ja |
|
OfficeActivity |
Microsoft 365 (voorheen Office 365) |
Ja |
Ja |
| Okta_CL |
[AFGESCHAFT] Okta Single Sign-On (met Azure-functie) (met behulp van Azure Functions) |
Ja |
Ja |
| OktaSSO |
Okta Single Sign-On (via Codeless Connector Framework) |
Nee |
Nee |
| Onapsis_Defend_CL |
Onapsis Defend: Unmatched SAP Threat Detection & Intel integreren met Microsoft Sentinel |
Ja |
Ja |
| OneLoginEventsV2_CL |
OneLogin IAM Platform (via Codeless Connector Framework) |
Ja |
Ja |
| OneLoginUsersV2_CL |
OneLogin IAM Platform (via Codeless Connector Framework) |
Ja |
Ja |
| OnePasswordEventLogs_CL |
1Wachtwoord (serverloos)
1Wachtwoord |
Ja |
Ja |
| OneTrustMetadataV3_CL |
OneTrust |
Ja |
Ja |
| OpenAIAuditLogs |
OpenAI (via Codeless Connector Framework) |
Nee |
Nee |
| OracleWebLogicServer_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| OrcaAlerts_CL |
Orca-beveiligingswaarschuwingen |
Ja |
Ja |
| PaloAltoCortexXDR_Alerts_CL |
Palo Alto Cortex XDR |
Ja |
Ja |
| PaloAltoCortexXDR_Audit_Agent_CL |
Palo Alto Cortex XDR |
Ja |
Ja |
| PaloAltoCortexXDR_Audit_Management_CL |
Palo Alto Cortex XDR |
Ja |
Ja |
| PaloAltoCortexXDR_Endpoints_CL |
Palo Alto Cortex XDR |
Ja |
Ja |
| PaloAltoCortexXDR_Incidents_CL |
Palo Alto Cortex XDR |
Ja |
Ja |
| PaloAltoPrismaCloudAlertV2_CL |
Palo Alto Prisma Cloud CSPM (via Codeless Connector Framework) |
Ja |
Ja |
| PanoraysCompanyFindingPOC_CL |
Panoray's |
Ja |
Ja |
| Perimeter81_CL |
Perimeter 81-activiteitenlogboeken |
Nee |
Nee |
| Phosphorus_CL |
Fosforapparaten |
Nee |
Nee |
| PingOne_AuditActivitiesV2_CL |
Ping One (via Codeless Connector Framework) |
Ja |
Ja |
| PostgreSQL_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
|
PowerAutomateActivity |
Microsoft Power Automate |
Ja |
Ja |
|
PowerBIActivity |
Microsoft PowerBI |
Ja |
Ja |
|
PowerPlatformAdminActivity |
Microsoft Power Platform Beheer-activiteit |
Ja |
Ja |
| prancer_CL |
Prancer-gegevensconnector |
Nee |
Nee |
| PrismaCloudCompute_CL |
Palo Alto Prisma Cloud CWPP (met behulp van REST API) |
Ja |
Ja |
| PRODAFTUstaCompromisedCredentials_CL |
PRODAFT USTA - Preventie van Account Takeover (via Codeless Connector Framework) |
Ja |
Ja |
|
ProjectActivity |
Microsoft Project |
Ja |
Ja |
| ProofpointPODMailLog_CL |
Proofpoint On Demand Email Security (via codeloze connectorplatform) |
Ja |
Ja |
| ProofpointPODMessage_CL |
Proofpoint On Demand Email Security (via codeloze connectorplatform) |
Ja |
Ja |
| ProofPointTAPClicksBlockedV2_CL |
Proofpoint TAP (via Codeless Connector Platform) |
Ja |
Ja |
| ProofPointTAPClicksPermittedV2_CL |
Proofpoint TAP (via Codeless Connector Platform) |
Ja |
Ja |
| ProofPointTAPMessagesBlockedV2_CL |
Proofpoint TAP (via Codeless Connector Platform) |
Ja |
Ja |
| ProofPointTAPMessagesDeliveredV2_CL |
Proofpoint TAP (via Codeless Connector Platform) |
Ja |
Ja |
|
PurviewDataSensitivityLogs |
Microsoft Purview |
Ja |
Ja |
| QscoutAppEvents_CL |
QscoutAppEventsConnector (via Codeless Connector Framework) |
Nee |
Nee |
| QualysHostDetectionV3_CL |
Qualys Kwetsbaarheidsbeheer (via Codeless Connector Framework) |
Ja |
Ja |
| QualysKB_CL |
Qualys VM KnowledgeBase (met behulp van Azure Functions) |
Ja |
Ja |
|
QualysKnowledgeBase |
Qualys Knowledge Base (via Codeless Connector Framework) |
Ja |
Ja |
| RadiflowEvent |
Radiflow iSID via AMA |
Nee |
Nee |
|
Rapid7InsightVMCloudAssets |
Rapid7 Insight Platform Kwetsbaarheidsbeheerrapporten (via Codeless Connector Framework) |
Ja |
Ja |
|
Rapid7InsightVMCloudVulnerabilities |
Rapid7 Insight Platform Kwetsbaarheidsbeheerrapporten (via Codeless Connector Framework) |
Ja |
Ja |
| RedSiftAuth_CL |
Rode siftgebeurtenissen (CCP Push) |
Nee |
Nee |
| RedSiftEmailForensics_CL |
Rode siftgebeurtenissen (CCP Push) |
Nee |
Nee |
| RelevanceSystemAlerts_CL |
Google Threat Intelligence Relevantiesysteem Waarschuwingen |
Nee |
Nee |
| RSAIDPlus_AdminLogs_CL |
RSA-id plus Beheer-logboekenconnector |
Nee |
Nee |
| Rubrik_Anomaly_Data_CL |
Rubrik Security Cloud-gegevensconnector (met behulp van Azure Functions) |
Ja |
Ja |
| Rubrik_Events_Data_CL |
Rubrik Security Cloud-gegevensconnector (met behulp van Azure Functions) |
Ja |
Ja |
| Rubrik_Ransomware_Data_CL |
Rubrik Security Cloud-gegevensconnector (met behulp van Azure Functions) |
Ja |
Ja |
| Rubrik_ThreatHunt_Data_CL |
Rubrik Security Cloud-gegevensconnector (met behulp van Azure Functions) |
Ja |
Ja |
| SailPointIDN_Events_CL |
SailPoint IdentityNow (met behulp van Azure Functions) |
Ja |
Ja |
| SailPointIDN_Triggers_CL |
SailPoint IdentityNow (met behulp van Azure Functions) |
Nee |
Nee |
|
SalesforceAuditTrail |
Salesforce-auditlogboeken (via het connectorframework zonder code) |
Ja |
Ja |
| SalesForceRealTimeEventMonitoring_CL |
SalesForce Real-Time Event Monitoring Connector (via Codeless Connector Framework) |
Ja |
Ja |
| SalesforceServiceCloudV3_CL |
Salesforce Service Cloud (via Codeless Connector Framework) |
Ja |
Ja |
| Samsung_Knox_Audit_CL |
Samsung Knox Asset Intelligence |
Ja |
Ja |
| SAPBTPAuditLog_CL |
SAP BTP |
Ja |
Ja |
| SAPETDAlerts_CL |
SAP Enterprise Threat Detection, cloudeditie |
Ja |
Ja |
| SAPETDInvestigations_CL |
SAP Enterprise Threat Detection, cloudeditie |
Ja |
Ja |
| SAPLogServ_CL |
SAP LogServ (RISE), privéeditie S/4HANA Cloud |
Ja |
Ja |
|
SecurityAlert |
Microsoft 365 Insider Risicobeheer
Microsoft Defender XDR
Microsoft Defender voor Eindpunt
Microsoft Defender for Identity
Microsoft Defender voor IoT
Microsoft Defender voor Office 365 (preview)
Microsoft Entra ID-beveiliging
Abonnementsgebaseerde Microsoft Defender voor cloud (verouderd)
Tenantgebaseerde Microsoft Defender voor cloud |
Ja |
Ja |
| SecurityAlert |
Microsoft Defender voor Cloud Applicaties |
Nee |
Nee |
| SecurityBridgeLogs_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
|
SecurityEvent |
Cyborg Security HUNTER Hunt Pakketten
Gebeurtenislogboeken van Microsoft Active-Directory-domeincontrollers
Beveiligingsevenementen via verouderde agent
Windows-beveiliging gebeurtenissen via AMA
[Afgeschaft] Microsoft Exchange-logboeken en -gebeurtenissen |
Ja |
Ja |
| SecurityIncident |
Derdack SIGNL4
Microsoft Defender XDR |
Ja |
Ja |
| Seg_Cg_CL |
Mimecast Veilige E-mailgateway |
Ja |
Ja |
| Seg_Dlp_CL |
Mimecast Veilige E-mailgateway |
Ja |
Ja |
| SentinelOne_CL |
[AFGESCHAFT] SentinelOne (met Azure-functie) (met behulp van Azure Functions) |
Ja |
Ja |
| SentinelOneActivities_CL |
SentinelOne (via Codeless Connector Framework)
SentinelOne V2 (via Codeless Connector Framework) |
Ja |
Ja |
| SentinelOneAgents_CL |
SentinelOne (via Codeless Connector Framework)
SentinelOne V2 (via Codeless Connector Framework) |
Ja |
Ja |
| SentinelOneAlerts_CL |
SentinelOne (via Codeless Connector Framework) |
Ja |
Ja |
| SentinelOneAlertsV2_CL |
SentinelOne V2 (via Codeless Connector Framework) |
Ja |
Ja |
| SentinelOneGroups_CL |
SentinelOne (via Codeless Connector Framework)
SentinelOne V2 (via Codeless Connector Framework) |
Ja |
Ja |
| SentinelOneThreats_CL |
SentinelOne (via Codeless Connector Framework)
SentinelOne V2 (via Codeless Connector Framework) |
Ja |
Ja |
| SeraphicWebSecurity_CL |
Seraphic Web Security |
Nee |
Nee |
|
SigninLogs |
Microsoft Entra ID |
Ja |
Ja |
| SlackAuditV2_CL |
SlackAudit (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeLoad_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeLogin_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeMaterializedView_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeQuery_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeRoleGrant_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeRoles_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeTables_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeTableStorageMetrics_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeUserGrant_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SnowflakeUsers_CL |
Snowflake (via Codeless Connector Framework) |
Ja |
Ja |
| SOCPrimeAuditLogs_CL |
SOC Prime Platform Auditlogs Data Connector |
Ja |
Ja |
| Sonrai_Tickets_CL |
Sonrai-gegevensconnector |
Nee |
Nee |
| SophosEP_CL |
[AFGESCHAFT] Sophos Endpoint Protection (met Azure-functie) (met behulp van Azure Functions) |
Ja |
Ja |
| SophosEPEvents_CL |
Sophos Endpoint Protection (via Codeless Connector Platform) |
Ja |
Ja |
| SquidProxy_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| StealthTalkAnomalousAuth_CL |
StealthTalk Anomaleuze Authenticatie |
Nee |
Nee |
|
StorageBlobLogs |
Azure opslagaccount |
Ja |
Ja |
|
StorageFileLogs |
Azure opslagaccount |
Ja |
Ja |
|
StorageQueueLogs |
Azure opslagaccount |
Ja |
Ja |
|
StorageTableLogs |
Azure opslagaccount |
Ja |
Ja |
| SymantecICDx_CL |
Symantec Geïntegreerde Cyberverdediging Exchange |
Nee |
Nee |
|
Syslog |
CTERA Syslog
Cisco Software Defined WAN
Syslog via AMA
Syslog via verouderde agent |
Ja |
Ja |
| TacitRed_Findings_CL |
Stilzwijgend gecompromitteerde referenties |
Nee |
Nee |
| Talon_CL |
Talon Inzichten |
Nee |
Nee |
| TaniumComplyCompliance_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumComplyVulnerabilities_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumDefenderHealth_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumDiscoverUnmanagedAssets_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumHighUptime_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumPatchCoverageStatus_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumPatchListApplicability_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumPatchListCompliance_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumSCCMClientHealth_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| TaniumThreatResponse_CL |
De CCF-pushconnector van Tanium |
Ja |
Ja |
| Tenable_IE_CL |
Duurzame identiteitsblootstelling |
Ja |
Ja |
| Tenable_VM_Asset_CL |
Tenable Vulnerability Management (met behulp van Azure Functions) |
Ja |
Ja |
| Tenable_VM_Compliance_CL |
Tenable Vulnerability Management (met behulp van Azure Functions) |
Ja |
Ja |
| Tenable_VM_Vuln_CL |
Tenable Vulnerability Management (met behulp van Azure Functions) |
Ja |
Ja |
| Tenable_WAS_Asset_CL |
Tenable Vulnerability Management (met behulp van Azure Functions) |
Ja |
Ja |
| Tenable_WAS_Vuln_CL |
Tenable Vulnerability Management (met behulp van Azure Functions) |
Ja |
Ja |
| TheHiveData |
TheHive (via Codeless Connector Framework) |
Nee |
Nee |
| TheomAlerts_CL |
Theom |
Nee |
Nee |
|
ThreatIntelIndicators |
CrowdStrike Falcon Adversary Intelligence (met behulp van Azure Functions)
GreyNoise Dreigingsintelligentie
JoeSandboxThreatIntelligence (met behulp van Azure Functions) |
Ja |
Nee |
|
ThreatIntelligenceIndicator |
Datalake2Sentinel
Luminar IOC's en gelekte referenties (met behulp van Azure Functions)
MISP2Sentinel
Microsoft Defender-bedreigingsinformatie
Mimecast Intelligence voor Microsoft - Microsoft Sentinel (met behulp van Azure Functions)
Premium Microsoft Defender-bedreigingsinformatie
Platformen voor bedreigingsinformatie
Api voor het uploaden van bedreigingsinformatie (preview)
Bedreigingsinformatie - TAXII
VMRayThreatIntelligence (met behulp van Azure Functions) |
Ja |
Nee |
| Tomcat_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| TransmitSecurityActivity_CL |
Beveiligingsconnector verzenden (met behulp van Azure Functions) |
Nee |
Nee |
| TrellixEvents |
Trellix Endpoint Security (via Codeless Connector Framework) |
Nee |
Nee |
| TrendMicro_XDR_OAT_CL |
Trend Vision One (met Azure Functions) |
Nee |
Nee |
| TrendMicro_XDR_RCA_Result_CL |
Trend Vision One (met Azure Functions) |
Nee |
Nee |
| TrendMicro_XDR_RCA_Task_CL |
Trend Vision One (met Azure Functions) |
Nee |
Nee |
| TrendMicro_XDR_WORKBENCH_CL |
Trend Vision One (met Azure Functions) |
Ja |
Ja |
| TrendMicroCAS_CL |
Trend Micro Cloud App Security (met Azure Functions) |
Ja |
Ja |
| TrendMicroCASV2_CL |
Trend Micro Cloud App Security (via Codeless Connector Framework) |
Nee |
Nee |
| Ttp_Attachment_CL |
Mimecast Gerichte Dreigingsbescherming |
Ja |
Ja |
| Ttp_Impersonation_CL |
Mimecast Gerichte Dreigingsbescherming |
Ja |
Ja |
| Ttp_Url_CL |
Mimecast Gerichte Dreigingsbescherming |
Ja |
Ja |
| Ubiquiti_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| union ASimAuditEventLogs, ASimAuthenticationEventLogs, ASimDhcpEventLogs, ASimDnsActivityLogs, ASimFileEventLogs, ASimNetworkSessionLogs, ASimProcessEventLogs, ASimRegistryEventLogs, ASimUserManagementActivityLogs, ASimWebSessionLogs |
Synqly-integratieconnector |
Nee |
Nee |
| UtimacoESKMKmipServerLogs_CL |
Utimaco Enterprise Secure Key Manager (ESKM) |
Nee |
Nee |
| Vaikora_AgentSignals_CL |
Gedragssignalen van Vaikora AI-agent |
Nee |
Nee |
| ValenceAlert_CL |
SaaS-beveiliging |
Nee |
Nee |
| ValimailEnforceEvents_CL |
Valimail Configuratie-gebeurtenissen afdwingen |
Ja |
Ja |
| VaronisAlerts_CL |
Varonis SaaS |
Ja |
Ja |
| VaronisResources_CL |
Varonis Purview Push-connector |
Ja |
Ja |
| vcenter_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |
| VectraStream_CL |
Aangepaste logboeken via AMA |
Nee |
Nee |
| VeeamAuthorizationEvents_CL |
Veeam Data Connector (met behulp van Azure Functions) |
Ja |
Ja |
| VeeamCovewareFindings_CL |
Veeam Data Connector (met behulp van Azure Functions) |
Ja |
Ja |
| VeeamMalwareEvents_CL |
Veeam Data Connector (met behulp van Azure Functions) |
Ja |
Ja |
| VeeamOneTriggeredAlarms_CL |
Veeam Data Connector (met behulp van Azure Functions) |
Ja |
Ja |
| VeeamSecurityComplianceAnalyzer_CL |
Veeam Data Connector (met behulp van Azure Functions) |
Ja |
Ja |
| VeeamSessions_CL |
Veeam Data Connector (met behulp van Azure Functions) |
Ja |
Ja |
| VersasecCmsErrorLogs_CL |
VersasecCms |
Nee |
Nee |
| VersasecCmsSysLogs_CL |
VersasecCms |
Nee |
Nee |
| VMwareWorkspaceOneDeviceApps |
VMware Workspace ONE (via Codeless Connector Framework) |
Nee |
Nee |
| VMwareWorkspaceOneDevices |
VMware Workspace ONE (via Codeless Connector Framework) |
Nee |
Nee |
|
W3CIISLog |
IIS-logboeken van Microsoft Exchange-servers
[Afgeschaft] Microsoft Exchange-logboeken en -gebeurtenissen |
Ja |
Nee |
| web_assets_CL |
Holm Security Asset Data (met behulp van Azure Functions) |
Nee |
Nee |
|
WindowsEvent |
Door Windows doorgestuurde gebeurtenissen |
Ja |
Ja |
| WizAuditLogsV3_CL |
Wiz for Microsoft Sentinel |
Nee |
Nee |
| WizDetectionsV3_CL |
Wiz for Microsoft Sentinel |
Ja |
Ja |
| WizIssuesV3_CL |
Wiz for Microsoft Sentinel |
Ja |
Ja |
| Workplace_Facebook_CL |
Workplace van Facebook (met behulp van Azure Functions) |
Nee |
Nee |
| WsSecurityEvents_CL |
WithSecure Elements (CCF)
WithSecure Elements-API (Azure functie) |
Ja |
Ja |
| XbowAssessments_CL |
XBOW-beveiligingsplatform (via Azure-functie) |
Nee |
Nee |
| XbowAssets_CL |
XBOW-beveiligingsplatform (via Azure-functie) |
Nee |
Nee |
| XbowFindings_CL |
XBOW-beveiligingsplatform (via Azure-functie) |
Nee |
Nee |
| ZeroFox_CTI_advanced_dark_web_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_botnet_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_breaches_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_C2_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_compromised_credentials_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_credit_cards_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_dark_web_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_discord_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_disruption_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_email_addresses_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_exploits_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_irc_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_malware_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_national_ids_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_phishing_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_phone_numbers_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_ransomware_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_telegram_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_threat_actors_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFox_CTI_vulnerabilities_CL |
ZeroFox CTI |
Nee |
Nee |
| ZeroFoxAdvancedDarkWeb_CL |
ZeroFox Enterprise - Geavanceerd Dark Web |
Ja |
Ja |
| ZeroFoxAlertPoller_CL |
ZeroFox-waarschuwingen
ZeroFox Enterprise - Waarschuwingen (Polling CCF) |
Ja |
Ja |
| ZeroFoxBotnet_CL |
ZeroFox Enterprise - Botnet |
Ja |
Ja |
| ZeroFoxBotnetCC_CL |
ZeroFox Enterprise - Botnet gecompromitteerde inloggegevens |
Ja |
Ja |
| ZeroFoxBreaches_CL |
ZeroFox Enterprise - Inbreuken |
Ja |
Ja |
| ZeroFoxCompromisedCredentials_CL |
ZeroFox Enterprise - Gecompromitteerde inloggegevens |
Ja |
Ja |
| ZeroFoxCreditCards_CL |
ZeroFox Enterprise - Creditcards |
Ja |
Ja |
| ZeroFoxDarkWeb_CL |
ZeroFox Enterprise - Dark Web |
Ja |
Ja |
| ZeroFoxDiscord_CL |
ZeroFox Enterprise - Discord |
Ja |
Ja |
| ZeroFoxDisruption_CL |
ZeroFox Enterprise - Verstoring |
Ja |
Ja |
| ZeroFoxEmailAddresses_CL |
ZeroFox Enterprise - E-mailadressen |
Ja |
Ja |
| ZeroFoxExploits_CL |
ZeroFox Enterprise - Exploits |
Ja |
Ja |
| ZeroFoxIndicators_CL |
ZeroFox Enterprise - Indicatoren |
Ja |
Ja |
| ZeroFoxKeyIncidents_CL |
ZeroFox Enterprise - Belangrijke Incidenten |
Ja |
Ja |
| ZeroFoxNationalIds_CL |
ZeroFox Enterprise - Nationale ID's |
Ja |
Ja |
| ZeroFoxPhysicalThreats_CL |
ZeroFox Enterprise - Fysieke Bedreigingen |
Ja |
Ja |
| ZeroFoxTelegram_CL |
ZeroFox Enterprise - Telegram |
Ja |
Ja |
| ZeroFoxVulnerabilities_CL |
ZeroFox Enterprise - Kwetsbaarheden |
Ja |
Ja |
| ZimperiumThreatLog_CL |
Zimperium Mobiele Dreigingsverdediging |
Nee |
Nee |
| ZNAudit_CL |
Zero Networks-segment (push) |
Ja |
Ja |
| ZNIdentityActivity_CL |
Zero Networks-segment (push) |
Ja |
Ja |
| ZNNetworkActivity_CL |
Zero Networks-segment (push) |
Ja |
Ja |
| ZNRPCActivity_CL |
Zero Networks-segment (push) |
Ja |
Ja |
| ZNSegmentAuditNativePoller_CL |
Zero Networks Segment Audit |
Ja |
Ja |
| Zoom_CL |
[UITGELOPEN] Zoom Reports (met Azure Functions) |
Nee |
Nee |
| ZoomV2_CL |
Zoom Reports Connector (via Connector Framework zonder code) |
Ja |
Ja |
| ZPA_CL |
Aangepaste logboeken via AMA |
Ja |
Ja |