PacketCYBER
2025-12-25
CQ Vista PacketCYBER app provides a parser, log schemas, logger model for PacketCYBER logs.
Slack
2025-12-25
The Slack app provides the functionality to send messages or dashboard images to Slack channels. When using the Slack Enterprise Grid plan, it supports audit log collection, dashboards, and threat detection.
Microsoft Azure
2025-12-24
Azure apps collect activity logs, Azure Firewall, Azure WAF, Azure Front Door, Azure Kubernetes, and Entra ID logs in real time through Event Hubs, and support visualization and threat detection.
NGFCTI
2025-12-23
Synchronize IP, domain, URL threat information and malware MD5 and SHA256 information from the FCTI service of the Financial Security Institute.
Splunk
2025-12-23
Splunk app provides remote searches and monitoring for jobs, data inputs, saved searches, indexes, users, output syslog settings, apps, and license status.
UMV WSS
2025-12-22
UMV WSS app provides a parser, logger model, dashboard, and detection rules for UMV Web Server Safeguard logs.
eStreamer
2025-12-19
The eStreamer app offers a dedicated logger, log schemas, logger model, and dashboards for Firepower systems. The eStreamer logger gathers events from the Cisco Secure Firewall Management Center.
Google Workspace
2025-12-19
Google Workspace app provides audit logs, Google Sheets integration, and dashboard visualizations for accounts, login, admin, OAuth, Google Drive, Google Meet, Google Chat activity logs.
AbuseIPDB
2025-12-19
The AbuseIPDB app provides a central blocklist to find and allows you to report addresses associated with malicious activities online. You can also fetch the top 10,000 abusive IP addresses from the AbuseIPDB blocklist and add them to your firewall blocklist.
ML Rules
2025-12-19
Machine Learning Rules app provides the feature generation query commands and training datasets needed for machine learning model-based threat detection.
AhnLab EPP
2025-12-18
AhnLab EPP app supports query commands for endpoint file search, file collection, Ahn report collection, V3 scan, suspicious behavior details, network quarantine, and exception rule management, and provides a dedicated log parser, logger model, dashboard, detection rules.
Elasticsearch
2025-12-12
Elasticsearch App provides logger and query commands to retrieve logs from the Elasticsearch via the REST API, or to monitor the Elastic cluster, including indexes, node status, licenses, and more.
React2Shell Scanner
2025-12-07
Scans for React2Shell (CVE-2025-29927, CVE-2025-66478), a Prototype Pollution vulnerability in Next.js Server Actions that can lead to remote code execution.
BLUEMAX WIPS
2025-12-05
BLUEMAX WIPS app provides a WIPS event log parser, logger model, and dashboard.