First release. Support following commands:
* aws-acm-certificates
* aws-auto-scaling-groups
* aws-auto-scaling-set-desired-capacity
* aws-cloudwatch-log-groups
* aws-cloudwatch-metrics
* aws-cloudwatch-stats
* aws-cost
* aws-ec2-account-attributes
* aws-ec2-addresses
* aws-ec2-images
* aws-ec2-instance-statuses
* aws-ec2-instances
* aws-ec2-key-pairs
* aws-ec2-nat-gateways
* aws-ec2-network-acls
* aws-ec2-route-tables
* aws-ec2-security-groups
* aws-ec2-subnets
* aws-ec2-volume-statuses
* aws-ec2-volumes
* aws-ec2-vpn-connections
* aws-elasticbeanstalk-applications
* aws-elasticbeanstalk-environments
* aws-elasticbeanstalk-instances-health
* aws-elb-listener-certificates
* aws-elb-load-balancers
* aws-elb-target-groups
* aws-iam-credential-report
* aws-iam-mfa-devices
* aws-iam-policies
* aws-iam-roles
* aws-iam-server-certificates
* aws-iam-users
* aws-rds-events
* aws-rds-logfiles
* aws-rds-logs
* aws-regions
* aws-route53-hosted-zones
* aws-s3-buckets
* aws-s3-objects
* aws-s3-textfile
First release. Support following query commands:
* netwitness-download-file
* netwitness-events
* netwitness-files
* netwitness-files-batch
* netwitness-meta
* netwitness-packets-batch
First release. Support following query commands:
* slack-send
* slack-send-batch
First release. Support following query commands:
* secudium-get-cve-score-report
* secudium-get-geo-report
* secudium-get-hash-behavior-report
* secudium-get-hash-dump
* secudium-get-hash-static-report
* secudium-get-hash-summary-report
* secudium-get-ip-report
* secudium-get-social-report
* secudium-get-top-report
* secudium-get-url-dump
* secudium-get-url-report
* secudium-get-whois-report
First release. Following axgate commands are supported:
* axgate-ngfw-add-ip
* axgate-ngfw-add-ip-batch
* axgate-ngfw-dnat-profiles
* axgate-ngfw-ip-groups
* axgate-ngfw-ip-groupsets
* axgate-ngfw-policies
* axgate-ngfw-remove-ip
* axgate-ngfw-remove-ip-batch
* axgate-ngfw-security-parameters
* axgate-ngfw-service-groups
* axgate-ngfw-service-groupsets
* axgate-ngfw-snat-profiles
* axgate-ngfw-time-groups
* axgate-ngfw-time-groupsets
First release. Support following query command:
* webkeeper-logs
First release. Support following query commands:
* insightvm-asset-services
* insightvm-asset-vulns
* insightvm-assets
* insightvm-scan-pause
* insightvm-scan-resume
* insightvm-scan-start
* insightvm-scan-stop
* insightvm-scans
First release. Following query commands are supported.
* genian-nac-cves
* genian-nac-nodes
* genian-nac-tags
* genian-nac-add-tag-batch
* genian-nac-remove-tag-batch
* genian-nac-node-groups
* genian-nac-remove-tag
* genian-nac-open-ports
* genian-nac-add-tag
* genian-nac-audit-logs
First release. Support following commands:
* telegram-send
* telegram-send-batch
FortiOS 5.6.7 or above. Support following commands:
* fortigate-add-address
* fortigate-address-groups
* fortigate-addresses
* fortigate-detected-devices
* fortigate-dst-stats
* fortigate-firewall-policies
* fortigate-firewall-policy-usages
* fortigate-kill-session
* fortigate-remove-address
* fortigate-resource-usages
* fortigate-services
* fortigate-sessions
* fortigate-src-stats
* fortigate-users
First release. Support following commands:
* tanium-browse-files
* tanium-connections
* tanium-create-action
* tanium-create-evidence
* tanium-create-evidence-batch
* tanium-delete-connection
* tanium-delete-evidence
* tanium-delete-evidence-batch
* tanium-delete-file-batch
* tanium-dns-events
* tanium-download-evidence
* tanium-download-evidence-batch
* tanium-driver-events
* tanium-evidences
* tanium-file-events
* tanium-image-events
* tanium-network-events
* tanium-process-events
* tanium-question
* tanium-rebase-file
* tanium-registry-events
* tanium-security-events
* tanium-task
* tanium-tasks
First release. Support following commands:
* ahnlab-epp-ack-unknown
* ahnlab-epp-block-network-result
* ahnlab-epp-collect-ahnreport-result
* ahnlab-epp-collect-file-result
* ahnlab-epp-match-node
* ahnlab-epp-nodes
* ahnlab-epp-search-file-result
* ahnlab-epp-start-block-network
* ahnlab-epp-start-collect-ahnreport
* ahnlab-epp-start-collect-file
* ahnlab-epp-start-search-file
* ahnlab-epp-start-unblock-network
* ahnlab-epp-start-v3-scan
* ahnlab-epp-tasks
* ahnlab-epp-unblock-network-result
* ahnlab-epp-unknown-behaviors
* ahnlab-epp-unknown-detail
* ahnlab-epp-unknowns
* ahnlab-epp-v3-scan-result
First release. Support following query commands.
* abuseipdb-blacklist
* abuseipdb-check-ip (support playbook)
* abuseipdb-report-ip (support playbook)
First release. Support following commands:
* o365-azure-ad-logs
* o365-exchange-logs
* o365-general-logs
* o365-sharepoint-logs
* o365-subscriptions
First release
Support following command extensions:
* maili-mails
* maili-sessions
* maili-files
Support following logger extensions:
* Mail-i Mail
* Mail-i Session
* Mail-i File