New Integrations

https://docs.rapid7.com/insightidr/alerts/

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-api/cortex-xdr-apis/incident-management/get-alerts.html

https://developer.carbonblack.com/reference/carbon-black-cloud/platform/latest/alerts-api/

https://qualysguard.qg3.apps.qualys.com/qwebhelp/fo_portal/api_doc/scans/index.htm

Signal Sciences offers two different types of APIs: Searching API and Data Extraction API. The Searching API is designed for retrospective log analysis, while the Data Extraction API is designed for wholesale log export on new and future events. It is recommended that the Data Extraction API be used as an initial integration point. The log format for each event is a nested JSON document. https://docs.signalsciences.net/developer/extract-your-data/ https://docs.signalsciences.net/api/#_corps__corpName__sites__siteName__requests_get https://docs.signalsciences.net/api/#_corps__corpName__sites__siteName__feed_requests_get

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/container-insights-analyze

Authentication: Which users successfully logged into Salesforce over the past 7 days? How many users failed to login to Salesforce by source IP over the past 14 days? What are the most common platforms used to successfully login to Salesforce over the past 30 days? Show me logins to Salesforce outside the US over the past 7 days Which client versions were used the most to login to Salesforce over the past 30 days? Which Salesforce usernames were used to generate login failures the least over the past 14 days? What TLS protocols were used to login to Salesforce over the past 14 days? What TLS cipher suites were used to login to Salesforce over the past 7 days? Audit: Which Salesforce admins performed the most number of changes in the past 30 days? Which delegated users were used the most by Salesforce administrators when making changes in the past 7 days? What Salesforce permissions were changed over the past 7 days? Which Salesforce user profiles were altered the most in the past 30 days? Who performed mass deletions in Salesforce over the past 14 days? Who performed the most exports in Salesforce over the past 7 days? Which admins imported the most data in Salesforce over the past 30 days? What services were activated in Salesforce by admins over the past 7 days? What domains were altered in Salesforce over the past 14 days? What were all the security relevant changes made in Salesforce over the past 24 hours? Which Salesforce users generated the most session timeouts over the past 7 days? https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_what_is_rest_api.htm

https://docs.microsoft.com/en-us/graph/azuread-identity-access-management-concept-overview

https://cloud.google.com/iam/docs/reference/rest/

https://docs.microsoft.com/en-us/rest/api/securityinsights/