SEKOIA.IO Intakes
- AWS CloudTrail
- Alsid
- Amazon VPC Flow Logs
- Amazon WAF
- Apache HTTP Server
- Azure Active Directory
- Azure Front Door
- Azure Linux
- Azure MySQL
- Azure Network Watcher (NSG flow logs)
- Azure Windows
- BIND
- CEF
- Check Point
- Cisco NX-OS
- Cisco Secure Firewall
- Cisco Web Security Appliance
- Cloudflare DNS logs
- Cloudflare Firewall Events
- Cloudflare HTTP requests
- CrowdStrike Falcon
- Cybereason MalOp
- Cybereason MalOp activity
- Digital Shadows SearchLight
- F5 BIG-IP
- Forcepoint Secure Web Gateway
- FortiMail
- FortiProxy
- FortiWeb
- Fortigate
- Gatewatcher AionIQ
- Google Cloud Audit
- Google Kubernetes Engine (GKE)
- Google VPC Flow Logs
- HAProxy
- Harfanglab
- IBM AIX
- ISC DHCP
- Imperva Web Application Firewall
- Infoblox DDI
- Linux
- Linux AuditBeat
- Log Insight Windows
- McAfee Web Gateway / Skyhigh Secure Web Gateway
- Microsoft Always On VPN
- Microsoft Defender for Endpoints
- Microsoft Intune
- NGINX
- Netfilter
- Netskope Events
- Office 365
- Office 365 Message Trace
- Okta System log
- OpenSSH
- Palo Alto
- Panda Security Aether
- Postfix
- Proofpoint On Demand
- Proofpoint Targeted Attack Protection
- Pulse Connect Secure
- Raw
- Retarus Email Security
- Rubycat PROVE IT
- SEKOIA.IO Endpoint Agent
- SEKOIA.IO activity logs
- SentinelOne
- SentinelOne Deep Visibility
- Sophos EDR
- Sophos Firewall
- SpamAssassin
- Squid
- Stormshield Network Security
- Suricata
- Symantec Endpoint Protection
- TEHTRIS Endpoint Detection & Reponse
- Tanium
- Trend Micro Deep Security / Workload Security
- Umbrella DNS Logs
- Umbrella IP Logs
- Umbrella Proxy Logs
- Unbound
- Vade M365
- Vectra Cognito Detect
- Wallix
- WatchGuard Firebox
- Windows
- Zeek