Robuta

https://bsky.app/profile/sekoia.io @sekoia.io on Bluesky A #SOCplatform boosted by #AI and #threatintelligence, combining #SIEM, #SOAR, #Automation in a single solution. Used by End-users, MSSP and APIs sekoia iobluesky https://infosec.exchange/@sekoia_io Sekoia.io (@sekoia_io@infosec.exchange) - Infosec Exchange 222 Posts, 1 Following, 137 Followers ยท A #SOCplatform boosted by #AI and #threatintelligence, combining #SIEM, #SOAR, #Automation in a single solution. Used... sekoia ioinfosecexchange https://docs.sekoia.io/integration/action_library/stormshield-ses/ Stormshield SES - Sekoia.io Documentation sekoia iostormshieldsesdocumentation https://docs.sekoia.io/integration/categories/network_security/akamai_waf/ Akamai WAF - Sekoia.io Documentation sekoia ioakamaiwafdocumentation https://docs.sekoia.io/cti/features/integrations/splunk_soar/ Splunk SOAR - Sekoia.io Documentation sekoia iosplunksoardocumentation https://docs.sekoia.io/integration/action_library/whois/ Whois - Sekoia.io Documentation sekoia iowhoisdocumentation https://docs.sekoia.io/xdr/features/integrations/interconnect_sekoia_with_xsoar/ Palo Alto Cortex XSOAR - Sekoia.io Documentation palo altosekoia iocortexdocumentation https://docs.sekoia.io/cti/features/integrations/taxii/ TAXII - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/cti/features/integrations/thehive/ Cortex Analyzer - Sekoia.io Documentation sekoia iocortexanalyzerdocumentation https://docs.sekoia.io/integration/categories/network_security/vectra_respond_ux_entity_scoring/ Vectra Respond UX - Entity Scoring - Sekoia.io Documentation sekoia iovectraresponduxentity https://docs.sekoia.io/integration/categories/endpoint/trellix_atd/ Trellix ATD - Sekoia.io Documentation sekoia iotrellixatddocumentation https://docs.sekoia.io/integration/categories/iam/beyondtrust_pra_sessions/ BeyondTrust PRA Sessions - Sekoia.io Documentation sekoia iobeyondtrustprasessionsdocumentation https://docs.sekoia.io/integration/categories/network_security/akamai_guardicore_onprem/ Akamai Guardicore On-Premises - Sekoia.io Documentation sekoia ioakamaipremisesdocumentation https://docs.sekoia.io/integration/action_library/crowdstrike-falcon/ CrowdStrike Falcon - Sekoia.io Documentation crowdstrike falconsekoia iodocumentation https://docs.sekoia.io/integration/categories/endpoint/trend_micro_vision_one_workbench/ Trend Micro Vision One Workbench - Sekoia.io Documentation trend microvision oneworkbenchsekoiadocumentation https://docs.sekoia.io/integration/action_library/fortigate-firewalls/ Fortigate Firewalls - Sekoia.io Documentation sekoia iofortigatefirewallsdocumentation https://docs.sekoia.io/integration/categories/endpoint/bitdefender_gravityzone/ Bitdefender GravityZone - Sekoia.io Documentation bitdefender gravityzonesekoia iodocumentation https://trust.sekoia.io/ SEKOIA.IO Sekoia.io Trust Center | Powered by SafeBase SafeBase monitors your security practices to enable you to win enterprise deals. trust center poweredsekoia iosafebase https://docs.sekoia.io/xdr/features/integrations/fortisoar/ FortiSOAR - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/categories/iam/one_identity_sps/ One Identity SPS Session logs - Sekoia.io Documentation one identitysekoia iospssessionlogs https://docs.sekoia.io/cti/features/integrations/anomali/ Anomali ThreatStream - Sekoia.io Documentation sekoia ioanomalidocumentation https://docs.sekoia.io/integration/categories/applicative/wiz_audit_logs/ Wiz Audit Logs - Sekoia.io Documentation audit logssekoia iowizdocumentation https://docs.sekoia.io/integration/categories/network_security/trellix_epo_on_prem/ Trellix ePO - On Prem - Sekoia.io Documentation sekoia iotrellixepopremdocumentation https://docs.sekoia.io/integration/categories/endpoint/sekoiaio/ Sekoia.io Endpoint Agent - Sekoia.io Documentation sekoia ioendpointagentdocumentation https://docs.sekoia.io/integration/categories/endpoint/stormshield_ses/ Stormshield SES - Sekoia.io Documentation sekoia iostormshieldsesdocumentation https://docs.sekoia.io/integration/assets_categories/user/okta_user/ Okta - Sekoia.io Documentation sekoia iooktadocumentation https://docs.sekoia.io/integration/categories/iam/beyondtrust_pra_team_activity/ BeyondTrust PRA Team - Sekoia.io Documentation sekoia iobeyondtrustprateamdocumentation https://blog.sekoia.io/ Home page - Sekoia.io Blog sekoia ioblog https://docs.sekoia.io/integration/categories/endpoint/sentinelone_cloudfunnel2.0/ SentinelOne Cloud Funnel 2.0 - Sekoia.io Documentation sekoia iosentinelonecloudfunneldocumentation https://docs.sekoia.io/integration/categories/network_security/bitsight_spm/ Bitsight SPM - Sekoia.io Documentation sekoia iobitsightspmdocumentation https://docs.sekoia.io/integration/action_library/intra_id/ Microsoft Entra ID (Azure AD) - Sekoia.io Documentation microsoft entra idazure adsekoia iodocumentation https://docs.sekoia.io/integration/categories/threat_intelligence/prodaft_usta/ Prodaft USTA - Sekoia.io Documentation sekoia ioustadocumentation https://docs.sekoia.io/integration/action_library/triage/ Triage - Sekoia.io Documentation sekoia iotriagedocumentation https://docs.sekoia.io/ Sekoia.io Documentation - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/categories/endpoint/trend_micro_vision_one_oat/ Trend Micro Vision One Observed Attack Techniques - Sekoia.io Documentation trend microvision oneobservedattacktechniques https://docs.sekoia.io/integration/action_library/microsoftdefender/ MicrosoftDefender - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/categories/network_security/azure_network_watcher_flow_logs/ Azure Network Watcher (Virtual Network Flow Logs) - Sekoia.io Documentation azure networksekoia iowatchervirtualflow https://docs.sekoia.io/integration/action_library/sentinelone/ SentinelOne - Sekoia.io Documentation sekoia iosentinelonedocumentation https://docs.sekoia.io/integration/action_library/iknowwhatyoudownload/ IKnowWhatYouDownload - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/xdr/features/integrations/swimlane_turbine/ Swimlane Turbine - Sekoia.io Documentation sekoia ioswimlaneturbinedocumentation https://docs.sekoia.io/integration/action_library/aws/ AWS - Sekoia.io Documentation sekoia ioawsdocumentation https://docs.sekoia.io/integration/categories/network_security/thinkst_canary/ Thinkst Canary - Sekoia.io Documentation sekoia iocanarydocumentation https://docs.sekoia.io/integration/categories/endpoint/cybereason_malop/ Cybereason MalOp - Sekoia.io Documentation sekoia iocybereasondocumentation https://docs.sekoia.io/integration/categories/iam/delinea_audit_logs/ Delinea Platform Audit Logs - Sekoia.io Documentation audit logssekoia iodelineaplatformdocumentation https://docs.sekoia.io/integration/action_library/microsoft-office365/ Microsoft Office365 - Sekoia.io Documentation sekoia iomicrosoftdocumentation https://docs.sekoia.io/integration/assets_categories/device/okta_device/ Okta - Sekoia.io Documentation sekoia iooktadocumentation https://docs.sekoia.io/integration/categories/network_security/forcepoint_ngfw/ Forcepoint NGFW - Sekoia.io Documentation sekoia ioforcepointngfwdocumentation https://docs.sekoia.io/integration/categories/network/efficientip_solidserver_ddi/ EfficientIP SOLIDServer DDI - Sekoia.io Documentation sekoia ioddidocumentation https://docs.sekoia.io/integration/categories/network_security/extrahop_revealx_360/ ExtraHop Reveal(x) 360 - Sekoia.io Documentation sekoia ioextrahoprevealdocumentation https://docs.sekoia.io/integration/assets_categories/device/aws_ec2_device/ AWS EC2 - Sekoia.io Documentation sekoia ioawsdocumentation https://docs.sekoia.io/integration/categories/iam/sentinelone_identity/ SentinelOne Singularity Identity - Sekoia.io Documentation sekoia iosentinelonesingularityidentitydocumentation https://go.sekoia.io/Preference-center-EN.html Sekoia.io - Preference Center sekoia iopreferencecenter https://docs.sekoia.io/integration/categories/iam/cyberark_identity_audit_logs/ CyberArk Identity Audit Logs - Sekoia.io Documentation audit logssekoia iocyberarkidentitydocumentation https://docs.sekoia.io/integration/categories/network_security/barracuda_cloudgen_firewall/ Barracuda CloudGen Firewall - Sekoia.io Documentation sekoia iobarracudafirewalldocumentation https://docs.sekoia.io/integration/categories/iam/keycloak_events/ Keycloak Events - Sekoia.io Documentation sekoia iokeycloakeventsdocumentation https://docs.sekoia.io/integration/categories/network_security/wiz_threat_detections/ Wiz Threat Detections - Sekoia.io Documentation sekoia iowizthreatdetectionsdocumentation https://docs.sekoia.io/integration/categories/network_security/google_cloud_load_balancing/ Google Cloud Load Balancing - Sekoia.io Documentation google cloudload balancingsekoia iodocumentation https://docs.sekoia.io/integration/categories/network_security/netskope_events/ Netskope Events - Sekoia.io Documentation sekoia ionetskopeeventsdocumentation https://docs.sekoia.io/integration/categories/endpoint/pradeo_mtd/ Pradeo MTD - Sekoia.io Documentation sekoia iomtddocumentation https://docs.sekoia.io/integration/categories/network_security/forcepoint_management_server/ Forcepoint Management Server - Sekoia.io Documentation sekoia ioforcepointmanagementserverdocumentation https://docs.sekoia.io/integration/action_library/eset/ Eset - Sekoia.io Documentation sekoia ioesetdocumentation https://blog.sekoia.io/apt28-to-repythonnet-automating-net-malware-analysis/ From APT28 to RePythonNET: automating .NET malware analysis - Sekoia.io Blog Apr 16, 2026 - This blogpost covers the tooling and methodology we use at TDR to reverse engineer .NET malware. In our daily work, we encounter a wide range of malware,... malware analysissekoia ioautomatingblog https://docs.sekoia.io/xdr/usecases/playbook/notifications_using_playbooks/ Send notifications to a Webhook using a playbook - Sekoia.io Documentation sekoia iosendnotificationswebhookusing https://docs.sekoia.io/integration/assets_categories/device/sophos_edr/ Sophos EDR - Sekoia.io Documentation sekoia iosophosedrdocumentation https://docs.sekoia.io/integration/categories/network_security/trend_micro_deep_security/ Trend Micro Deep Security / Workload Security - Sekoia.io Documentation trend microsekoia iodeepsecurityworkload https://docs.sekoia.io/integration/categories/applicative/azure_activity_logs/ Azure Activity Logs - Sekoia.io Documentation sekoia ioazureactivitylogsdocumentation https://docs.sekoia.io/integration/categories/email/message_trace_graph_api/ Office 365 Message Trace (Graph API) - Sekoia.io Documentation graph apisekoia ioofficemessagetrace https://docs.sekoia.io/integration/categories/network_security/f5-distributed-cloud/ F5 Distributed Cloud - Sekoia.io Documentation distributed cloudsekoia iodocumentation https://docs.sekoia.io/integration/categories/endpoint/sentinelone/ SentinelOne - Sekoia.io Documentation sekoia iosentinelonedocumentation https://docs.sekoia.io/integration/action_library/certificate-transparency/ Certificate Transparency - Sekoia.io Documentation certificate transparencysekoia iodocumentation https://docs.sekoia.io/cti/features/integrations/threatquotient/ ThreatQuotient - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/operation_center/integration_catalog/uuid/ee6364a1-9e3c-4363-9cb6-2f574bd4ce51/ Ee6364a1 9e3c 4363 9cb6 2f574bd4ce51 - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/cti/features/integrations/swimlane_turbine/ Swimlane Turbine - Sekoia.io Documentation sekoia ioswimlaneturbinedocumentation https://docs.sekoia.io/integration/assets_categories/user/microsoft_entra_id/ Microsoft Entra ID - Sekoia.io Documentation microsoft entra idsekoia iodocumentation https://docs.sekoia.io/integration/categories/network_security/broadcom_siteminder/ Broadcom Siteminder - Sekoia.io Documentation sekoia iobroadcomsiteminderdocumentation https://docs.sekoia.io/integration/action_library/git/ Git - Sekoia.io Documentation sekoia iogitdocumentation https://docs.sekoia.io/integration/action_library/virustotal/ VirusTotal - Sekoia.io Documentation sekoia iovirustotaldocumentation https://docs.sekoia.io/operation_center/integration_catalog/uuid/09754cc4-e247-4712-9a76-25529ba11b8b/ 09754cc4 e247 4712 9a76 25529ba11b8b - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/action_library/glimps/ GLIMPS - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/categories/endpoint/watchguard_epdr/ WatchGuard EPDR - Sekoia.io Documentation sekoia iowatchguarddocumentation https://docs.sekoia.io/integration/categories/network_security/trapster/ Trapster - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/action_library/microsoft-active-directory/ Microsoft Active Directory - Sekoia.io Documentation active directorysekoia iomicrosoftdocumentation https://docs.sekoia.io/cti/features/integrations/opencti-stream-connector/ OpenCTI Stream Connector - Sekoia.io Documentation sekoia iostreamconnectordocumentation https://docs.sekoia.io/integration/categories/endpoint/nucleon_edr/ Nucleon EDR - Sekoia.io Documentation sekoia ioedrdocumentation https://docs.sekoia.io/integration/categories/endpoint/kubernetes/ Kubernetes Audit Logs - Sekoia.io Documentation audit logssekoia iokubernetesdocumentation https://docs.sekoia.io/integration/action_library/the-hive/ The Hive - Sekoia.io Documentation sekoia iohivedocumentation https://docs.sekoia.io/cti/features/integrations/misp/ MISP Feed - Sekoia.io Documentation sekoia iomispfeeddocumentation https://docs.sekoia.io/integration/categories/iam/entra_id/ Microsoft Entra ID (Azure AD) - Sekoia.io Documentation microsoft entra idazure adsekoia iodocumentation https://docs.sekoia.io/integration/action_library/servicenow/ ServiceNow - Sekoia.io Documentation sekoia ioservicenowdocumentation https://docs.sekoia.io/cti/features/integrations/splunk/ Splunk - Sekoia.io Documentation sekoia iosplunkdocumentation https://docs.sekoia.io/integration/categories/network/ekinops_oneos/ Ekinops OneOS - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/action_library/mattermost/ Mattermost - Sekoia.io Documentation sekoia iomattermostdocumentation https://docs.sekoia.io/integration/categories/endpoint/nozomi_cmc/ Nozomi Central Management Console - Sekoia.io Documentation management consolesekoia ionozomicentraldocumentation https://docs.sekoia.io/integration/action_library/harfanglab/ HarfangLab - Sekoia.io Documentation sekoia ioharfanglabdocumentation https://docs.sekoia.io/integration/categories/network_security/nozomi_vantage/ Nozomi Vantage - Sekoia.io Documentation sekoia ionozomivantagedocumentation https://docs.sekoia.io/integration/categories/network_security/netskope_log_streaming/ Netskope Log Streaming (Transaction Events) - Sekoia.io Documentation sekoia ionetskopelogstreamingtransaction https://docs.sekoia.io/integration/categories/applicative/microsoft_sentinel/ Microsoft Sentinel - Sekoia.io Documentation sekoia iomicrosoftsentineldocumentation https://docs.sekoia.io/integration/asset_connectors/uuid/226573e7-3969-4e31-bb3a-0846760b35b9/ 226573e7 3969 4e31 bb3a 0846760b35b9 - Sekoia.io Documentation sekoia iodocumentation https://docs.sekoia.io/integration/assets_categories/device/sentinelone_edr/ SentinelOne EDR - Sekoia.io Documentation sekoia iosentineloneedrdocumentation https://docs.sekoia.io/integration/action_library/stix/ STIX - Sekoia.io Documentation sekoia iostixdocumentation