Integrations
30+ built-in log parsers, 20+ SOAR actions, and vendor integrations for your existing tools.
Integrations
Works with your existing tools
30+ built-in log parsers, 20+ SOAR actions, and extensible vendor integration framework for automated response.
Supported Log Sources (30+ Parsers)
Quick Heal
Seqrite
Kaspersky
Windows Event Log
Sysmon
Windows Defender
NXLog
UPI Switch
Palo Alto
Fortinet
Cisco ASA
Suricata
Zeek
CrowdStrike
Okta MFA
Azure MFA
Microsoft 365 Mailbox
Apache / Nginx
OpenVPN
Linux SSH
DNS
Web Proxy
USB Devices
Email Gateway
OT Protocols
CEF
LEEF
SOAR Actions (20+ Built-in)
Slack
Teams
Email
Jira
ServiceNow
PagerDuty
Webhooks
Isolate Host
Kill Process
Collect Artifacts
YARA Scan
Disable / Enable User
Block IP
Check Point Block
DDoS Mitigation
IP / Domain / Hash Reputation
WHOIS & GeoIP
AWS, Azure & GCP Response
CrowdStrike
Defender for Endpoint
SentinelOne
Carbon Black
Firewall / Network
iptables
Windows Firewall
Check Point
AWS Network ACL
Azure NSG
GCP Firewall
Identity / SSO
OIDC
SAML 2.0
SCIM
Microsoft Entra ID
Okta
Threat Intel & Enrichment
VirusTotal
AbuseIPDB
AlienVault OTX
MISP
TAXII/STIX 2.1