Files

.devcontainer
.github
.gitlab
.guardrails
.hooks
.vscode
Config
Documentation
Images
Packs
- 3CXDesktopApp_Supply_Chain_Attack
- AHA
- AMP
- ANYRUN
- APIVoid
- ARIAPacketIntelligence
- AWS-ACM
- AWS-AccessAnalyzer
- AWS-Athena
- AWS-CloudTrail
- AWS-CloudWatchLogs
- AWS-EC2
- AWS-EKS
- AWS-Enrichment-Remediation
- AWS-GuardDuty
  - Classifiers
  - IncidentFields
  - IncidentTypes
  - Integrations
  - Layouts
  - ModelingRules
  - ParsingRules
  - ReleaseNotes
    - 1_0_1.md
    - 1_1_0.md
    - 1_1_1.md
    - 1_1_2.md
    - 1_1_3.md
    - 1_1_4.md
    - 1_2_0.md
    - 1_2_1.md
    - 1_2_10.md
    - 1_2_2.md
    - 1_2_3.md
    - 1_2_4.md
    - 1_2_5.md
    - 1_2_6.json
    - 1_2_6.md
    - 1_2_7.md
    - 1_2_8.md
    - 1_2_9.md
    - 1_3_0.md
    - 1_3_1.md
    - 1_3_10.md
    - 1_3_11.md
    - 1_3_12.md
    - 1_3_13.md
    - 1_3_14.json
    - 1_3_14.md
    - 1_3_15.md
    - 1_3_16.md
    - 1_3_17.md
    - 1_3_18.md
    - 1_3_19.md
    - 1_3_2.md
    - 1_3_20.md
    - 1_3_21.md
    - 1_3_22.md
    - 1_3_23.md
    - 1_3_24.md
    - 1_3_25.md
    - 1_3_26.md
    - 1_3_27.md
    - 1_3_28.md
    - 1_3_29.md
    - 1_3_3.md
    - 1_3_30.md
    - 1_3_31.md
    - 1_3_32.md
    - 1_3_33.md
    - 1_3_34.md
    - 1_3_35.md
    - 1_3_36.md
    - 1_3_37.md
    - 1_3_38.md
    - 1_3_39.md
    - 1_3_4.json
    - 1_3_4.md
    - 1_3_40.md
    - 1_3_41.md
    - 1_3_42.md
    - 1_3_43.md
    - 1_3_44.md
    - 1_3_45.md
    - 1_3_46.md
    - 1_3_47.md
    - 1_3_48.md
    - 1_3_49.md
    - 1_3_5.md
    - 1_3_50.md
    - 1_3_51.md
    - 1_3_52.md
    - 1_3_53.md
    - 1_3_54.md
    - 1_3_55.md
    - 1_3_56.md
    - 1_3_57.md
    - 1_3_6.md
    - 1_3_7.md
    - 1_3_8.md
    - 1_3_9.md
  - .pack-ignore
  - .secrets-ignore
  - README.md
  - pack_metadata.json
- AWS-IAM
- AWS-IAMIdentityCenter
- AWS-ILM
- AWS-Lambda
- AWS-NetworkFirewall
- AWS-Organizations
- AWS-Route53
- AWS-S3
- AWS-SNS-Listener
- AWS-SNS
- AWS-SQS
- AWS-SecurityHub
- AWS-SecurityLake
- AWS_DynamoDB
- AWS_ELB
- AWS_Sagemaker
- AWS_SystemManager
- AWS_WAF
- AbnormalSecurity
- Absolute
- AbuseDB
- AcalvioShadowplex
- AccentureCTI
- AccentureCTI_Feed
- AccessInvestigation
- Accessdata
- ActiveMQ
- Active_Directory_Query
- Aella_StarLight
- AgariPhishingDefense
- Akamai_SIEM
- Akamai_WAF
- Alexa
- Algosec
- AlibabaActionTrail
- AlienVault_OTX
- AlienVault_USM_Anywhere
- AlphaSOC_Network_Behavior_Analytics
- AlphaSOC_Wisdom
- AlphaVantage
- Anomali_Enterprise
- Anomali_ThreatStream
- AnsibleAlibabaCloud
- AnsibleAzure
- AnsibleCiscoIOS
- AnsibleCiscoNXOS
- AnsibleHetznerCloud
- AnsibleKubernetes
- AnsibleLinux
- AnsibleMicrosoftWindows
- AnsibleTower
- AnsibleVMware
- Ansible_Powered_Integrations
- AnythingLLM
- ApacheTomcat
- ApacheWebServer
- ApiModules
- AppNovi
- AppendIfNotEmpty
- AquatoneDiscover
- ArcSightESM
- ArcSightLogger
- ArcSightXML
- Arcanna
- ArcherRSA
- ArcusTeam
- Arduino
- AristaSwitch
- Arkime
- Armis
- Armorblox
- ArrayToCSV
- AsanaConnect
- Asset
- Ataya
- AtlassianConfluenceCloud
- AtlassianJiraServiceManagement
- AttachmentsPreProcessing
- AttackIQFireDrill
- AttivoBotsink
- Attlasian
- Auditd
- AutoFocus
- Automox
- AvayaAuraCommunicationManager
- AwakeSecurity
- Aws-SecretsManager
- Axonius
- Azure-Enrichment-Remediation
- AzureActiveDirectory
- AzureAppService
- AzureCompute
- AzureDataExplorer
- AzureDevOps
- AzureEventsHub
- AzureFirewall
- AzureKeyVault
- AzureKubernetesServices
- AzureLogAnalytics
- AzureNetworkSecurityGroups
- AzureResourceGraph
- AzureRiskyUsers
- AzureSQLManagement
- AzureSecurityCenter
- AzureSentinel
- AzureStorage
- AzureStorageContainer
- AzureStorageFileShare
- AzureStorageQueue
- AzureStorageTable
- AzureWAF
- BMCDiscovery
- BPA
- Barracuda
- BarracudaEmailProtection
- BarracudaWAF
- Barracuda_Cloudgen_Firewall
- Base
- BastilleNetworks
- BatchData
- BeyondTrust-AuthorizationRequests
- BeyondTrustPrivilegedRemoteAccess
- BeyondTrustRemoteSupport
- BeyondTrust_Password_Safe
- BigFix
- Binalyze
- BitDam
- BitSight
- Bitbucket
- BitcoinAbuse
- BitwardenPasswordManager
- Blockade.io
- BloodHoundEnterprise
- BluecatAddressManager
- Blueliv
- BluelivThreatCompass
- BluelivThreatContext
- BmcHelixRemedyForce
- BmcITSM
- Bonusly
- Box
- Brandefense
- BreachNotification-US
- BreachRx
- BrocadeSwitch
- BruteForce
- C2sec
- CIRCL
- CIRCLHashlookup
- CSCDomainManager
- CTF02
- CTIX
- CTM360-CyberBlindspot
- CVESearch
- CVE_2021_40444
- CVE_2021_44228
- CVE_2022_26134
- CVE_2022_30190
- CVE_2022_3786_and_CVE_2022_3602_-_OpenSSL_X.509_Buffer_Overflows
- CVE_2022_41040_and_CVE_2022_41082_-_ProxyNotShell
- CVE_2023_23397_-_Microsoft_Outlook_EoP
- CVE_2023_34362_-_MOVEit_SQLI
- CVE_2023_36884_-_Microsoft_Office_and_Windows_RCE
- CVE_2024_47575
- CVE_2024_6387_-_OpenSSH_RCE_RegreSSHion
- CVSS
- CadoResponse
- Camlytics
- Campaign
- CarbonBlackCommonFields
- CarbonBlackDefense
- CarbonBlackEnterpriseEDR
- CarbonBlackProtect
- Carbon_Black_Enterprise_Live_Response
- Carbon_Black_Enterprise_Response
- CaseManagement-Generic
- Celonis
- Censys
- Centreon
- CentrifyVault
- CertStream
- Change_Management
- CheckPhish
- CheckPointDome9
- CheckPointHEC
- CheckPointHarmonyEndpoint
- CheckPointNDR
- CheckPointSandBlast
- CheckpointFirewall
- Cherwell
- CimTrak-SystemIntegrityAssurance
- CircleCI
- Cisco-umbrella-cloud-security
- Cisco-umbrella-enforcement
- Cisco-umbrella
- CiscoAMP
- CiscoASA
- CiscoASR
- CiscoCatalyst
- CiscoESAIronPortEmailAPI
- CiscoEmailSecurity
- CiscoFirepower
- CiscoISR
- CiscoNexus
- CiscoSMA
- CiscoSpark
- CiscoStealthwatch
- CiscoThousandEyes
- CiscoUmbrellaReporting
- CiscoWSA
- CiscoWebExFeed
- Cisco_Wireless_LAN_Controller
- CitrixADC
- Clarizen
- Claroty
- ClarotyXDome
- ClearswiftDLP
- ClickSend
- CloakedUrsaPhishingCampaign
- Cloaken
- CloudConvert
- CloudIDS
- CloudIncidentResponse
- CloudLock
- CloudShare
- CloudShark
- CloudflareWAF
- CloudflareZeroTrust
- Code42
- Cofense-Intelligence
- CofenseIntelligenceV2
- CofenseTriage
- CofenseVision
- Cognni
- CohesityHelios
- CommonDashboards
- CommonPlaybooks
- CommonReports
- CommonScripts
- CommonTypes
- CommonWidgets
- CommunityCommonDashboards
- CommunityCommonScripts
- CommvaultSecurityIQ
- Compliance
- ComputerVisionEngine
- ConcentricAI
- Confluence
- Confluera
- ContentInstallation
- ContentManagement
- ContentTesting
- ConvertTimezoneFromUTC
- Coralogix
- Core
- CoreAlertFields
- CorelightZeek
- Cortex911
- CortexAttackSurfaceManagement
- CortexDataLake
- CortexResponseAndRemediation
- CortexVulnerabilityManagement
- CortexXDR
- CortexXpanse
- CounterCraft
- CounterTack
- CovalenceForSecurityProviders
- CovalenceManagedSecurity
- CreateEDLInstance
- CreateHash
- CreatePlbkDoc
- CrisisManagement
- CrowdSec
- CrowdStrikeFalcon
- CrowdStrikeFalconSandbox
- CrowdStrikeFalconStreamingV2
- CrowdStrikeFalconX
- CrowdStrikeHost
- CrowdStrikeIntel
- CrowdStrikeMalquery
- CrowdStrikeOpenAPI
- Cryptocurrency
- Cryptosim
- CuckooSandbox
- CyCognito
- CybelAngel
- CyberArkEPM
- CyberArkEPV
- CyberArkIdentity
- CyberArkPAS
- CyberArk_Privileged_Threat_Analytics
- CyberChef
- CyberTotal
- CyberTriage
- CyberX-CentralManager
- Cybereason
- Cyberint
- Cyberpion
- Cybersixgill-ActionableAlerts
- Cybersixgill-DVE
- Cyberwatch
- CybleEvents
- CybleEventsV2
- CybleThreatIntel
- Cylance_Protect
- Cymptom
- Cymulate
- CyrenInboxSecurity
- D2
- DB2
- DBotTruthBombs
- DNSDB
- DNSOverHttps
- DSPM
- Darktrace
- DarktraceASM
- DataBee
- DatadogCloudSIEM
- DataminrPulse
- DateTimeToADTime
- DeCYFIR
- DeHashed
- DeduplicateValuesbyKey
- DeepInstinct
- DeepL
- DefaultPlaybook
- DelineaALM
- DelineaDSV
- DelineaSS
- DellEMCUnity
- DemistoLocking
- DemistoRESTAPI
- DeprecatedContent
- DevSecOps
- DeveloperTools
- Devo
- Dig
- DigitalGuardian
- DigitalShadows
- Digital_Defense_FrontlineVM
- Discord
- DomainTools
- DomainToolsIrisDetect
- DomainTools_Iris
- DragosWorldview
- Dragos_Platform
- Drift
- Dropbox
- Druva
- DuoAdminApi
- DuoAuth
- DynamicSectionReports
- EDL
- EDLMonitor
- EWS
- EWSMailSender
- EasyVista
- EclecticIQ
- Edgescan
- Elasticsearch
- ElasticsearchMonitoring
- EmailCommunication
- EmailHippo
- EmailRepIO
- EmployeeOffboarding
- Endace
- Endgame
- Envoy
- Exabeam
- ExabeamDataLake
- ExabeamSecurityOperationsPlatform
- ExceedLMS
- Exchange2016_Compliance
- ExifRead
- ExodusIntelligence
- Expanse
- ExpanseV2
- ExportIndicators
- ExportToXLSX
- ExtFilter
- Exterro
- ExtraHop
- F5
- F5APM
- F5ASM
- F5BigIPAWAF
- F5LTM
- F5Silverline
- FTP
- FeedAWS
- FeedAlienVault
- FeedAzure
- FeedAzureADConnectHealth
- FeedBambenekConsulting
- FeedBlocklist_de
- FeedBruteForceBlocker
- FeedCSV
- FeedCloudflare
- FeedCofense
- FeedCognyteLuminar
- FeedCrowdstrikeFalconIntel
- FeedCyCognito
- FeedCyjax
- FeedCyrenThreatInDepth
- FeedDHS
- FeedDShield
- FeedDomainTools
- FeedElasticsearch
- FeedFastly
- FeedFeedly
- FeedFeodoTracker
- FeedFireEye
- FeedGCPWhitelist
- FeedGitHub
- FeedGreyNoiseIndicator
- FeedIntel471
- FeedJSON
- FeedLOLBAS
- FeedMISP
- FeedMISPThreatActors
- FeedMajesticMillion
- FeedMalwareBazaar
- FeedMalwareDomainList
- FeedMandiant
- FeedMicrosoftIntune
- FeedMitreAttack
- FeedMitreAttackv2
- FeedNVDv2
- FeedORKL
- FeedOffice365
- FeedOpenCTI
- FeedPlainText
- FeedProofpoint
- FeedPublicDNS
- FeedRSS
- FeedRecordedFuture
- FeedReversingLabsRansomwareAndRelatedToolsApp
- FeedSOCRadarThreatFeed
- FeedSpamhaus
- FeedTAXII
- FeedTalos
- FeedThreatConnect
- FeedThreatFox
- FeedThreatVault
- FeedTorExitAddresses
- FeedURLhaus
- FeedUnit42
- FeedUnit42v2
- FeedZeroDayLiveTIFusion
- FeedZoom
- Feedsslabusech
- FetchIndicatorsFromFile
- FidelisElevateNetwork
- FidelisEndpoint
- FileOrbis
- FiltersAndTransformers
- FireEye-Detection-on-Demand
- FireEyeCM
- FireEyeCommonFields
- FireEyeETP
- FireEyeEX
- FireEyeHX
- FireEyeHelix
- FireEyeNX
- FireMonSecurityManager
- Flashpoint
- FlashpointFeed
- Forcepoint
- ForcepointDLP
- ForcepointEmailSecurity
- ForcepointSWG
- ForcepointSecurityManagementCenter
- Forescout
- ForescoutEyeInspect
- Fortanix-DSM
- FortiAuthenticator
- FortiGate
- FortiManager
- FortiSIEM
- FortiSandbox
- Fortimail
- FortinetFortiwebVM
- ForwardXSOARAuditLogsToSplunkHEC
- FraudWatch
- FreeEnrichers
- FreeFeeds
- FreshDesk
- FreshworksFreshservice
- FullHunt
- GCP-Enrichment-Remediation
- GCP-IAM
- GDPR
- GLIMPS_Detect
- GLPI
- GRR
- GSuiteAdmin
- GSuiteSecurityAlertCenter
- GZip
- Gamma
- Gatewatcher-AionIQ
- Gatewatcher-LIS
- Gem
- GenerateAsBuilt
- GenericAPIEventCollector
- GenericSQL
- GenericWebhook
- GenericWebhook_FormData
- GenetecSecurityCenter
- Genians
- GetFields
- GetLicenseID
- GetServerURL
- GettingStartedWithXSOAR
- GigamonThreatINSIGHT
- Giphy
- GitGuardian
- GitHub
- GitLab
- GithubMaltrailFeed
- Gmail
- GmailSingleUser
- GoogleApigee
- GoogleBigQuery
- GoogleCalendar
- GoogleChatViaWebhook
- GoogleChrome
- GoogleChronicleBackstory
- GoogleCloudCompute
- GoogleCloudFunctions
- GoogleCloudLogging
- GoogleCloudSCC
- GoogleCloudStorage
- GoogleCloudTranslate
- GoogleDocs
- GoogleDorking
- GoogleDrive
- GoogleKeyManagementService
- GoogleKubernetesEngine
- GoogleMaps
- GooglePubSub
- GoogleResourceManager
- GoogleSafeBrowsing
- GoogleSheets
- GoogleThreatIntelligence
- GoogleVault
- GoogleVertexAI
- GoogleVisionAPI
- Gophish
- Grafana
- GraphQL
- Graylog
- GreatHorn
- GreyNoise
- GroupIB_ThreatIntelligenceAttribution
- GsuiteAuditor
- GuardiCore
- Guidance_Encase_Endpoint
- Gurucul
- HIPAA-BreachNotification
- HPEArubaCentral
- HPEArubaClearPass
- HPESwitch
- HPE_Service_Manager
- HYASInsight
- HYASProtect
- HackerOne
- Hackuity
- HarfangLabEDR
- HashiCorp-Vault
- HashiCorpTerraform
- HatchingTriage
- HealthCheck
- HelloIAMWorld
- HelloWorld
- Hey
- HostIo
- Hoxhunt
- HuaweiNetworkDevices
- Hudsonrock
- Humio
- Hunting
- HybridAnalysis
- IAM-SCIM
- IBMGuardium
- IBMMaaS360Security
- IBMResilientSystems
- IBMSecurityVerify
- IBM_AIX
- ICEBRG
- ILert
- IP-API
- IP2LocationIO
- IPQualityScore
- IRISDFIR
- Iboss
- Identity
- IdentityRecordedFuture
- Illumio
- IllusiveNetworks
- ImageOCR
- Impartner
- Imperva_Skyfence
- Imperva_WAF
- ImpossibleTraveler
- Incapsula
- Indeni
- Infinipoint
- InfoArmor_VigilanteATI
- Infoblox
- InfobloxBloxOne
- Infocyte
- IntSight
- IntegrationsAndIncidentsHealthCheck
- Intezer
- Inventa
- InvertEveryTwoItems
- Ipstack
- IronDefense
- IronPort
- Ironscales
- IronscalesEventCollector
- IsArrayItemInList
- IsItPhishing
- IvantiConnectSecure
- IvantiCriticalVulnerabilities
- IvantiHeat
- IvantiPulseSecureVTM
- JARM
- JSONSampleIncidentGenerator
- JWT
- Ja3er
- JamfProtect
- Jask
- Jira
- Jizo_M
- JoeSecurity
- Jq
- JsonUnescape
- JsonWhoIs
- JuniperSRX
- KELARaDark
- Kafka
- KasperskySecurityCenter
- KeeperSecretsManager
- KeeperSecurity
- Kenna
- Keyfactor
- Kiteworks
- KnowBe4KMSAT
- KnowBe4_KMSAT
- Koodous
- Kubernetes
- LINENotify
- LSASSCredentialDumping
- Lacework
- Lansweeper
- Lastline
- Linkshadow
- LinuxEventsCollection
- LogPoint_SIEM_Integration
- LogRhythm
- LogRhythmRest
- LogsignSiem
- Logzio
- Lokpath_Keylight
- Looker
- Lost_Stolen_Device
- Luminate
- Lumu
- MISP
- MITRECoA
- ML
- MS-ISAC
- MacOS
- MacVendors
- MailListener
- MailListener_-_POP3
- MailSenderNew
- MajorBreachesInvestigationandResponse
- Maltiverse
- Malware
- MalwareBazaar
- MalwareInvestigationAndResponse
- Malwarebytes
- MalwationAIMA
- Malwr
- ManageEngine-ADAudit
- ManageEngine-ADManager
- ManageEngine-ADSelfServicePlus
- ManageEngine_PAM360
- MandiantAdvantageAttackSurfaceManagement
- MandiantAdvantageThreatIntelligence
- Mantis
- MapPattern
- MapRegex
- MarkdownToHTML
- Mattermost
- MaxList
- MaxMind_GeoIP2
- McAfee-MAR
- McAfee-TIE
- McAfeeDatabaseSecurity
- McAfeeNSM
- McAfeeWebGateway
- McAfee_Advanced_Threat_Defense
- McAfee_DXL
- McAfee_ESM-v10
- McAfee_ESM
- MergeDictArray
- MicroFocusSMAX
- Microsoft365Defender
- MicrosoftADFS
- MicrosoftAdvancedThreatAnalytics
- MicrosoftCloudAppSecurity
- MicrosoftCore
- MicrosoftDHCP
- MicrosoftDNS
- MicrosoftDefenderAdvancedThreatProtection
- MicrosoftDefenderforIdentity
- MicrosoftECM
- MicrosoftEntraID
- MicrosoftExchangeOnPremise
- MicrosoftExchangeOnline
- MicrosoftExchangeServer
- MicrosoftGraphAPI
- MicrosoftGraphApplications
- MicrosoftGraphCalendar
- MicrosoftGraphDeviceManagement
- MicrosoftGraphFiles
- MicrosoftGraphGroups
- MicrosoftGraphIdentityandAccess
- MicrosoftGraphListener
- MicrosoftGraphMail
- MicrosoftGraphSearch
- MicrosoftGraphSecurity
- MicrosoftGraphTeams
- MicrosoftGraphUser
- MicrosoftIISWebServer
- MicrosoftIntune
- MicrosoftManagementActivity
- MicrosoftNPS
- MicrosoftPolicyAndCompliance
- MicrosoftTeams
- MicrosoftWSUS
- MicrosoftWindowsAMSI
- MicrosoftWindowsEvents
- MicrosoftWindowsSysmon
- Mimecast
- MinList
- MinervaLabsAntiEvasionPlatform
- MitreCaldera
- MobileIronUEM
- ModulesManagement
- Moloch
- MongoDB
- MongoDBAtlas
- MultiTenantPerformance
- MxToolBox
- MySQLEnterprise
- NCSCCyberAsssessmentFramework
- NGFWTSAgentDeployment
- NGINXWebServer
- NIST
- NTT_Cyber_Threat_Sensor
- NationalVulnerabilityDatabaseFeed
- Ncurion
- Neosec
- NetBox
- NetCalc
- NetQuestOMX
- Netcraft
- Netcraft_V2
- Netmiko
- NetscoutAED
- NetscoutArborSightline
- Netskope
- NetskopeV2
- Nexthink
- NistNVD
- Nmap
- NonSupported
- NozomiNetworks
- NucleonCyber
- NutanixHypervisor
- OPNSense
- OPSWAT-Filescan
- OPSWAT-MetaDefender-Sandbox
- OSQuery
- OSXCollector
- OTRS
- OTSecurity
- OctoxLabs
- Office365
- Office365AndAzureAuditLog
- Okta
- OktaASA
- OktaAuth0
- OktaOAG
- Oletools
- Ollama
- OnboardingIntegration
- OneLogin
- OnePassword
- OnemodelDev
- OpenAI
- OpenCTI
- OpenCVE
- OpenLDAP
- OpenPhish
- OpenSourceVulnerabilities
- OpsGenie
- Opsgeniev2
- Oracle
- OracleCloudInfrastructure
- OracleCloudInfrastructureFeed
- Oracle_IAM
- Orca
- PAN-OS
- PANOSPolicyOptimizer
- PANOStoCDLMonitoring
- PANWComprehensiveInvestigation
- PATHelpdeskAdvanced
- PHash
- PICUS
- PacketMail
- Packetsled
- PagerDuty
- PaloAltoNetworksAIOps
- PaloAltoNetworksAutomaticSLR_Community
- PaloAltoNetworksPQCHunting_Community
- PaloAltoNetworks_IoT
- PaloAltoNetworks_IoT3rdParty
- PaloAltoNetworks_PAN_OS_EDL_Management
- PaloAltoNetworks_SecurityAdvisories
- PaloAltoNetworks_Threat_Vault
- Palo_Alto_Networks_Enterprise_DLP
- Palo_Alto_Networks_WildFire
- ParseHTMLTables
- ParseYAML
- PassiveTotal
- PasswordResetViaChatbot
- PcapAnalysis
- Pcysys
- PenfieldAI
- PerceptionPoint
- Perch
- PerimeterX
- PhishAI
- PhishLabs
- PhishTank
- PhishUp
- Phishing
- PhishingAlerts
- PhishingURL
- PiHole
- PicusAutomation
- PicusNGAutomation
- PingCastle
- PingIdentity
- Pipl
- PolarSecurity
- PolySwarm
- Polygon
- PopularCybersecurityNews
- PortScan
- Portnox
- PostmarkSpamcheck
- PowerShellUtilities
- PowershellPayloadResponse
- PowershellRemoting
- Preempt
- PrismaAccess
- PrismaCloud
- PrismaCloudCompute
- PrismaCloudComputeReporting
- PrismaSaasSecurity
- ProactiveThreatHunting
- ProofpointCasb
- ProofpointEmailSecurity
- ProofpointIsolation
- ProofpointObserveIT
- ProofpointServerProtection
- ProofpointTAP
- ProofpointThreatProtection
- ProofpointThreatResponse
- ProtectWise
- PublishList
- Pulsedive
- Pwned
- QRCodeReader
- QRadar
- QSS
- Qintel
- QualysFIM
- QueryAI
- QuestKace
- QutteraWebsiteMalwareScanner
- RDPCacheHunting
- RSANetWitnessEndpoint
- RSANetWitness_v11_1
- RSASecureID
- RSS
- RSTCloud
- RTIR
- RadwareCloudServices
- RandomElementFromList
- RandomImages_VideosAndAudio
- Ransomware
- Rapid7AppSec
- Rapid7InsightVMCloud
- Rapid7_InsightIDR
- Rapid7_Nexpose
- Reco
- RecordedFuture
- RecordedFutureASI
- Recorded_Future
- RedCanary
- Redact_DefangIndicators_URLs_IPs_Email
- Redmine
- RegexExpand
- RegexReplace
- Remedy-On-Demand
- Remedy_AR
- RemoteAccess
- RemoveEmpty
- RemoveEmptyEvidence
- ReplaceMatchGroup
- Resecurity
- Respond
- RetarusSecureEmailGateway
- RetrievePlaybooksAndIntegrations
- ReversingLabs_A1000
- ReversingLabs_TitaniumScale
- ReversingLabs_Titanium_Cloud
- RiskIQDigitalFootprint
- RiskSense
- RoksitDNSSecurity
- RsaNetWitnessPacketsAndLogs
- RsaNetwitnessSecurityAnalytics
- RubrikPolaris
- RunZero
- Rundeck
- SANS
- SAP_IAM
- SCADAfence_CNM
- SEKOIAIntelligenceCenter
- SMB
- SMIME_Messaging
- SNDBOX
- SOCRadar
- SSLCertificates
- SSLLabs
- SSLVerifier
- SafeBreach
- SafeNet_Trusted_Access
- Safewalk
- SailPointIdentityIQ
- SailPointIdentityNow
- Salesforce
- SalesforceFusion
- SalesforceIndicators
- SalesforceV2
- SandBlastAppliance
- Sandblast
- ScheduleTaskAndPoll
- ScreenshotMachine
- SecBI
- SecneurXAnalysis
- SecneurXThreatFeeds
- SecureAuthIdentityPlatform
- SecureWorks
- SecurityAdvisor
- SecurityIntelligenceServicesFeed
- SecurityScorecard
- SecurityTrails
- Securonix
- SekoiaXDR
- SemperisDSP
- SendGrid
- SentinelOne
- Sepio
- ServerLogs
- ServiceDeskPlus
- ServiceDeskPlus_On_Premise
- ServiceNow
- 233 entries not shown
Templates
TestData
TestPlaybooks
Tests
Utils
contribution
docs
.editorconfig
.gitignore
.lgtm.yml
.markdownlint.json
.nvmrc
.pre-commit-config_template.yaml
.sourcery.yaml
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
README.md
content-descriptor.json
mypy-requirements.txt
nightly_ruff.toml
package-lock.json
package.json
poetry.lock
poetry.toml
pyproject.toml
tox.ini
validation_config.toml
xsoar_content_logo.png

1_3_19.md

Cannot retrieve latest commit at this time.

Integrations

AWS - GuardDuty

Updated the Docker image to: demisto/boto3py3:1.0.0.54965.

AWS - GuardDuty Event Collector

Updated the Docker image to: demisto/boto3py3:1.0.0.54965.