Classifiers & Mappers

471 classifiers.

Name Type Pack Default Incident Type Feed
AWS Feed - Classifier Classification AWS Feed — Yes
AWS Feed - Incoming Mapper Mapper (In) AWS Feed — Yes
AWS Security Hub - Incoming Mapper Mapper (In) AWS - Security Hub — No
AWS Security Hub - Outgoing Mapper Mapper (Out) AWS - Security Hub — No
AWSGuardDuty - Classifier Classification AWS - GuardDuty — No
AWSGuardDuty - Incoming Mapper Mapper (In) AWS - GuardDuty — No
Abnormal Security - Incoming Mapper Mapper (In) Abnormal Security — No
Agari Phishing Defense - Classifier Classification Agari Phishing Defense Agari Phishing Defense Policy Event No
Agari Phishing Defense - Mapper Mapper (In) Agari Phishing Defense — No
Agari Phishing Defense - Phishing Alerts - Classifier Classification Agari Phishing Defense Agari Phishing Defense Policy Event No
Argus Case Classifier Classification mnemonic MDR — No
Argus Case Mapper Mapper (In) mnemonic MDR — No
Armis - Classifier Classification Armis Armis Alert No
Armis - Incoming Mapper Mapper (In) Armis Armis Alert - Anomaly Detection No
Armorblox - Classifier Classification Armorblox Armorblox No
Armorblox - Mapper Mapper (In) Armorblox — No
Asimily_Insight - Classifier Classification Asimily Insight — No
Asimily_Insight - Incoming Mapper Mapper (In) Asimily Insight — No
Ataya - Incoming Mapper Mapper (In) Ataya — No
Azure Active Directory Identity and Access Classifier Classification Azure Active Directory Identity and Access (Deprecated) Azure Active Directory Identity and Access No
Azure Active Directory Identity and Access Incoming Mapper Mapper (In) Azure Active Directory Identity and Access (Deprecated) — No
Azure DevOps Incoming Mapper Mapper (In) AzureDevOps — No
Azure DevOps Outgoing Mapper Mapper (Out) AzureDevOps — No
Azure Storage Queue Classifier Classification Azure Storage Queue Azure Storage Queue Incident No
Azure Storage Queue Mapper Mapper (In) Azure Storage Queue — No
BMC ITSM Classifier Classification BMC Helix ITSM — No
BMC ITSM Incoming Mapper Mapper (In) BMC Helix ITSM — No
BMC ITSM Outgoing Mapper Mapper (Out) BMC Helix ITSM — No
BMCHelixRemedyforce - Classifier Classification Bmc Helix Remedyforce Bmc Remedyforce Service Request No
BMCHelixRemedyforce - Incoming Mapper Mapper (In) Bmc Helix Remedyforce Bmc Remedyforce Service Request No
BitSight - Classifier Classification Bitsight BitSight Findings No
BitSight - Incoming Mapper Mapper (In) Bitsight — No
Box Incident Incoming Mapper Mapper (In) Box — No
CRYPTTECH Generic Mapper (In) Cryptosim — No
CTIX v3 Classifier Classification Cyware Intel Exchange CTIX Intel No
CTIX v3 Incoming Mapper Mapper (In) Cyware Intel Exchange — No
CTM360-CyberBlindspot - Incoming Mapper Mapper (In) CTM360 — No
CTM360-HackerView - Incoming Mapper Mapper (In) CTM360 — No
Carbon Black EDR Classifier Classification Carbon Black Enterprise Response Carbon Black EDR No
Carbon Black EDR Mapper Mapper (In) Carbon Black Enterprise Response — No
Carbon Black Endpoint Standard Incoming Mapper Mapper (In) Carbon Black Endpoint Standard — No
Case Management - Generic Mapper Mapper (In) CaseManagement-Generic — No
CheckPointHEC Classifier Classification Check Point Harmony Email and Collaboration (HEC) — No
CheckPointHEC Incoming Mapper Mapper (In) Check Point Harmony Email and Collaboration (HEC) — No
CheckPointXDR_Incoming_Mapper Mapper (In) Check Point XDR Check Point XDR Incident No
CheckPointXDR_Out_Mapper Mapper (Out) Check Point XDR — No
Chronicle - Classifier Classification Google SecOps — No
Chronicle - Incoming Mapper Mapper (In) Google SecOps — No
CimTrak - Classification Classification CimTrak - System Integrity Assurance CimTrak Incident No
CiscoESA - Incoming Mapper Mapper (In) Cisco Email Security Appliance (IronPort) — No
CiscoSMA - Incoming Mapper Mapper (In) CiscoSMA — No
Claroty - Classifier Classification Claroty — No
Claroty - Incoming Mapper Mapper (In) Claroty — No
Code42 - Classifier Classification Code42 Code42 Security Alert No
Code42 - Mapping Mapper (In) Code42 — No
Cofense Triage - Classifier Classification Cofense Triage Cofense Triage Report No
Cofense Triage Report - Incoming Mapper Mapper (In) Cofense Triage — No
Cohesity Helios Incoming mapper Mapper (In) Cohesity Helios — No
CohesityHelios Incident Classifier Classification Cohesity Helios Cohesity Helios Ransomware Incident No
Commvault Suspicious File Activity Mapper Mapper (In) Commvault Cloud — No
ConcentricAi Classification ConcentricAI ConcentricAI Security Event No
ConcentricAi-mapper Mapper (In) ConcentricAI — No
Cortex XDR - Classifier Classification Cortex XDR by Palo Alto Networks — No
Cortex XDR - Outgoing Mapper Mapper (Out) Cortex XDR by Palo Alto Networks — No
Cortex XDR Incident Handler - Classifier Classification Cortex XDR by Palo Alto Networks Cortex XDR Incident No
Cortex XDR Incident Handler - Classifier CTF Classification Capture The Flag - 01 — No
CrowdStrike Falcon - Outgoing Mapper Mapper (Out) CrowdStrike Falcon — No
CrowdStrike Falcon Incident Classifier Classification CrowdStrike Falcon CrowdStrike Falcon Incident No
CrowdStrike Falcon Mapper Mapper (In) CrowdStrike Falcon — No
CrowdStrike Falcon Mapper Mapper (In) CrowdStrike Falcon — No
CrowdStrike Falcon Streaming - Classifier Classification CrowdStrike Falcon Streaming — No
CrowdStrike Falcon Streaming - Incoming Mapper Mapper (In) CrowdStrike Falcon Streaming — No
CyCognito - Incoming Mapper Mapper (In) CyCognito — No
CybelAngel Mapper (In) CybelAngel CybelAngel No
CyberInt Incoming (mapper) Mapper (In) Cyberint — No
CyberInt Outgoing (mapper) Mapper (Out) Cyberint — No
Cyberint - Classifier Classification Cyberint — No
Cyberpion-Classifier Classification Cyberpion — No
Cyberpion-Mapper Mapper (In) Cyberpion — No
Cybersixgill Actionable Alerts - Incoming Mapper Mapper (In) Cybersixgill Actionable Alerts — No
Cyble Intel Alert Classification Classification Cyble Events (Deprecated) — No
Cyble Intel Alert Mapper Mapper (In) Cyble Events (Deprecated) — No
CybleEventsv2-Incoming-Mapper Mapper (In) CybleEventsV2 — No
CybleEventsv2-Outgoing-Mapper Mapper (Out) CybleEventsV2 — No
Cymulate - Classifier Classification Cymulate Cymulate Immediate Threats No
Cymulate - Incoming Mapper Mapper (In) Cymulate Cymulate Immediate Threats No
Cymulate Assessment Findings - Incoming Mapper Mapper (In) Cymulate — No
Cymulate_v2 - Classification Classification Cymulate Cymulate No
Cymulate_v2 - Incoming Mapper Mapper (In) Cymulate — No
Cypho Threat Intelligence Incoming Mapper Mapper (In) Cypho Threat Intelligence — No
Cypho Threat Intelligence Issue Classifier Classification Cypho Threat Intelligence Cypho Unclassified Incident No
Cyren Inbox Security Classifier Classification Cyren Inbox Security — No
Cyren Inbox Security Mapper Mapper (In) Cyren Inbox Security — No
Cyren Threat InDepth Indicator Mapper Mapper (In) Cyren Threat InDepth Threat Intelligence — Yes
Darkmon - Classifier Classification Darkmon Darkmon Compromised Credential No
Darkmon - Feed Classifier Classification Darkmon IP Yes
Darkmon - Feed Mapper Mapper (In) Darkmon IP Yes
Darkmon - Incoming Mapper Mapper (In) Darkmon Darkmon Compromised Credential No
Darktrace AI Analyst Mapper (In) Darktrace — No
Darktrace ASM Risk Mapper Mapper (In) DarktraceASM — No
Darktrace Email Mapper Mapper (In) Darktrace — No
Darktrace Incident Classifier Classification Darktrace Darktrace Model Breach No
Darktrace Model Breach Mapper (In) Darktrace — No
Darktrace Model Breach Mapper Mapper (In) Darktrace — No
Data Loss Prevention Mapper (In) Enterprise DLP by Palo Alto Networks Data Loss Prevention No
DataBee - Incoming Mapper Mapper (In) DataBee — No
Datadog Cloud SIEM - Incoming Mapper Mapper (In) Datadog Cloud SIEM — No
Datadog Cloud SIEM V2 Classification Datadog Cloud SIEM Datadog Cloud SIEM V2 No
Datadog Cloud SIEM V2 - Incoming Mapper Mapper (In) Datadog Cloud SIEM — No
Dataminr Pulse - Incoming Mapper Mapper (In) Dataminr Pulse — No
DeCYFIR - Incidents Classifier Classification DeCYFIR — No
DeCYFIR - Incoming Mapper Mapper (In) DeCYFIR — No
Digital Shadows Incident Classifier Classification ReliaQuest Digital Risk Protection Digital Shadows Intelligence Incident No
Digital Shadows Incident Mapper Mapper (In) ReliaQuest Digital Risk Protection — No
DomainTools Iris - Classifier Classification DomainTools Iris Investigate — No
DomainTools Iris - Mapper Mapper (In) DomainTools Iris Investigate — No
DomainTools Iris Detect - Classifier Classification DomainTools Iris Detect — No
DomainTools Iris Detect - Incoming Mapper Mapper (In) DomainTools Iris Detect — No
Doppel Incoming_Mapper Mapper (In) Doppel — No
Doppel Outgoing_Mapper Mapper (Out) Doppel — No
Doppel_Incident_Classifier Classification Doppel — No
EWS - Classifier Classification Microsoft Exchange On-Premise — No
EWS - Classifier - Email Communication Classification Email Communication Email Communication No
EWS - Incoming Mapper Mapper (In) Microsoft Exchange On-Premise — No
EWS - Incoming Mapper - Email Communication Mapper (In) Email Communication — No
Elasticsearch - Incoming Mapper Mapper (In) Elasticsearch — No
Exabeam Classifier Classification Exabeam Advanced Analytics — No
Exabeam Platform - Incoming Mapper Mapper (In) Exabeam Security Operations Platform — No
Exabeam mapping Mapper (In) Exabeam Advanced Analytics — No
ExpanseV2 - Classifier Classification Cortex Xpanse by Palo Alto Networks (Deprecated) Expanse Issue No
ExpanseV2 - Incoming Mapper Mapper (In) Cortex Xpanse by Palo Alto Networks (Deprecated) — No
ExtraHop Detections - Incoming Mapper Mapper (In) ExtraHop Reveal(x) — No
F5 Silverline Classifer Classification F5 Silverline — No
F5 Silverline mapper Mapper (In) F5 Silverline — No
FireEye Central Management - Classifier Classification FireEye Central Management — No
FireEye EX - Incoming Mapper Mapper (In) FireEye Common Fields — No
FireEye Email Security - Classifier Classification FireEye Email Security (EX) — No
FireEye Email Security - Phishing Alerts - Classifier Classification FireEye Email Security (EX) — No
FireEye HX - Incoming Mapper Mapper (In) FireEye HX — No
FireEye HX Alert Classification FireEye HX — No
FireEye NX - Classifier Classification FireEye Network Security (NX) — No
FireEye NX Alert - Incoming Mapper v2 Mapper (In) FireEye Common Fields — No
FireEye NX IPS Alert - Incoming Mapper v2 Mapper (In) FireEye Common Fields — No
FireEye NX Incoming Mapper Mapper (In) FireEye Network Security (NX) — No
Flashpoint Alerts - Incoming Mapper Mapper (In) Flashpoint — No
Flashpoint Compromised Credentials - Incoming Mapper Mapper (In) Flashpoint — No
Forescout EyeInspect mapper Mapper (In) Forescout EyeInspect — No
FortiSIEM v2 Mapper (In) FortiSIEM — No
FraudWatch Incident - Incoming Mapper Mapper (In) FraudWatch PhishPortal — No
FreshworksFreshservice - Classifier Classification Freshworks Freshservice — No
FreshworksFreshservice - Incoming Mapper Mapper (In) Freshworks Freshservice — No
FreshworksFreshservice - Outgoing Common Mapping Mapper (Out) Freshworks Freshservice — No
G Suite Security Alert Center - Classifier Classification G Suite Security Alert Center G Suite Security Alert Center No
G Suite Security Alert Center - Mapper Mapper (In) G Suite Security Alert Center — No
GLPI - Classifier Classification GLPI — No
GLPI - Incoming Mapper Mapper (In) GLPI — No
GLPI - Outgoing Mapper Mapper (Out) GLPI — No
GRACase-Classifier Classification Gurucul Risk Analytics GRACase No
GRACase-Mapper Mapper (In) Gurucul Risk Analytics GRACase No
Gatewatcher Incidents Classifier Classification Gatewatcher AionIQ Gatewatcher Incident No
Gatewatcher Mapper Incoming Mapper (In) Gatewatcher AionIQ — No
Gem Classifier Classification Gem — No
Gem Mapper Mapper (In) Gem Gem Alert No
Gem Mapper Webhook Mapper (In) Gem — No
GenericSQL Classifier Classification GenericSQL — No
Gigamon ThreatINSIGHT Classification Gigamon ThreatINSIGHT — No
GitHub Mapper Mapper (In) DevSecOps — No
Github Classifier Classification DevSecOps — No
Gmail - Classifier Classification Gmail — No
Gmail - Classifier - Email Communication Classification Email Communication Email Communication No
Gmail - Incoming Mapper Mapper (In) Gmail — No
Gmail - Incoming Mapper - Email Communication Mapper (In) Email Communication — No
Gmail Single User - Classifier Classification Gmail Single User Phishing No
Gmail Single User - Incoming Mapper Mapper (In) Gmail Single User — No
Google Dorking Mapper (In) Google Dorking — No
Google Drive - Classifier Classification Google Drive Google Drive Activity No
Google Drive - Incoming Mapper Mapper (In) Google Drive — No
Google Threat Intelligence ASM Issues - Incoming Mapper Mapper (In) GoogleThreatIntelligence — No
Google Threat Intelligence DTM Alerts - Incoming Mapper Mapper (In) GoogleThreatIntelligence — No
Google Threat Intelligence RS Alerts - Incoming Mapper Mapper (In) GoogleThreatIntelligence — No
GoogleCloudSCC - Classifier Classification Google Cloud SCC Google Cloud SCC Finding No
GoogleCloudSCC - Incoming Mapper Mapper (In) Google Cloud SCC — No
Grafana Alert Classifier Classification Grafana Grafana Alert No
Grafana Alert Mapper Mapper (In) Grafana — No
Graph Security Alert Mapper (In) Microsoft Graph Security — No
GravityZone - Classifier Classification GravityZone — No
GravityZone - Incoming Mapper Mapper (In) GravityZone — No
Group-IB Digital Risk Protection (classifier) Classification Group-IB Digital Risk Protection — No
Group-IB Digital Risk Protection (mapper) Mapper (In) Group-IB Digital Risk Protection — No
Group-IB Threat Intelligence (classifier) Classification Group-IB Threat Intelligence — No
Group-IB Threat Intelligence (mapper) Mapper (In) Group-IB Threat Intelligence — No
GuardiCore Incoming Mapper Mapper (In) Akamai GuardiCore — No
Guardicore classifier Classification Akamai GuardiCore Guardicore Incident No
HackerOne - Incoming Mapper Mapper (In) HackerOne — No
Hello World - Classification Classification HelloWorld — No
Hello World - Incoming Mapper Mapper (In) HelloWorld — No
Hoxhunt-classifier Classification Hoxhunt — No
Hoxhunt-mapper-incoming Mapper (In) Hoxhunt — No
Hoxhunt-mapper-outgoing Mapper (Out) Hoxhunt — No
Hurukai - Incoming mapper Mapper (In) HarfangLab EDR — No
Hurukai - Outgoing mapper Mapper (Out) HarfangLab EDR — No
Hurukai classifier Classification HarfangLab EDR Hurukai threat No
IAM Sync User - Workday Mapper (In) Workday — No
IBM QRadar SOAR - Classifier Classification IBM Security QRadar SOAR IBM QRadar SOAR Incident No
IBM QRadar SOAR Incoming Mapper Mapper (In) IBM Security QRadar SOAR — No
IBM QRadar SOAR Outgoing Mapper Mapper (Out) IBM Security QRadar SOAR — No
Ignite Alert - Incoming Mapper Mapper (In) Flashpoint — No
Illusive Networks - Classifier Classification Illusive Networks Illusive Networks Incident No
Illusive Networks - Incoming Mapper Mapper (In) Illusive Networks Illusive Networks Incident No
Indeni - Classifier Classification Indeni Indeni Incident No
Indeni - Incoming Mapper Mapper (In) Indeni Indeni Incident No
Infinipoint - Classifier Classification Infinipoint — No
Infinipoint - Incoming Mapper Mapper (In) Infinipoint — No
Infoblox Cloud - Classifier Classification Infoblox Threat Defense with DDI — No
Infoblox Cloud - Incoming Mapper Mapper (In) Infoblox Threat Defense with DDI — No
IronDefense - Classifier Classification IronNet — No
IronDefense - Incoming Mapper Mapper (In) IronNet — No
Ironscales - Incoming Mapper Mapper (In) Ironscales — No
JiraV3 Outgoing Mapper Mapper (Out) Atlassian Jira — No
Jizo M - Incoming Mapper Mapper (In) JizoM — No
Lacework - Classifier Classification Lacework Lacework Alert No
Lacework - Incoming Mapper Mapper (In) Lacework Lacework Alert No
Legacy CrowdStrike Falcon-Mapper Mapper (In) CrowdStrike Falcon — No
Legacy CrowdStrike Falcon-Mapper Mapper (In) CrowdStrike Falcon — No
LogPoint SIEM Integration - Incoming Mapper Mapper (In) LogPoint SIEM Integration LogPoint Incident No
LogRhythm Classifier Classification LogRhythm — No
LogRhythm Mapper Mapper (In) LogRhythm — No
LogsignSIEM Mapper Mapper (In) Logsign SIEM — No
LogsignSIEM_Classifier Classification Logsign SIEM — No
Logz.io - Classifier Classification Logz.io Logz.io Alert No
Logz.io - Incoming Mapper Mapper (In) Logz.io Logz.io Alert No
Lumu Classification Lumu Lumu No
LumuInMap Mapper (In) Lumu — No
MS Graph Mail - Classifier - Email Communication Classification Email Communication Email Communication No
MS Graph Mail - Incoming Mapper - Email Communication Mapper (In) Email Communication — No
MS Graph Mail Single User - Classifier - Email Communication Classification Email Communication Email Communication No
MS Graph Mail Single User - Incoming Mapper - Email Communication Mapper (In) Email Communication — No
Mail Listener - Classifier Classification Common Types Phishing No
Mail Listener - Incoming Mapper Mapper (In) Common Types Phishing No
Mail Listener - POP3 - Incoming Mapper Mapper (In) MailListener - POP3 Phishing No
Mandiant Advantage ASM Incoming - Mapper Mapper (In) Mandiant Advantage Attack Surface Management — No
Mandiant Automated Defense Classifier Classification Mandiant Automated Defense — No
Mandiant Automated Defense Incoming Mapper Mapper (In) Mandiant Automated Defense — No
MicroFocus SMAX Mapper Mapper (In) MicroFocus SMAX — No
Microfocus SMAX Classifier Classification MicroFocus SMAX — No
Microsoft 365 Defender - Incoming Mapper Mapper (In) Microsoft 365 Defender — No
Microsoft 365 Defender - Outgoing Mapper Mapper (Out) Microsoft 365 Defender — No
Microsoft Advanced Threat Analytics - Classification Classification Microsoft Advanced Threat Analytics Microsoft ATA Suspicious Activity No
Microsoft Advanced Threat Analytics - Incoming Mapper Mapper (In) Microsoft Advanced Threat Analytics Microsoft ATA Suspicious Activity No
Microsoft CAS Mapper (In) Microsoft Defender for Cloud Apps — No
Microsoft CAS Classifier Classification Microsoft Defender for Cloud Apps Microsoft CAS Alert No
Microsoft Defender For Endpoint Mapper Mapper (In) Microsoft Defender for Endpoint — No
Microsoft Graph Identity and Access Classifier Classification Microsoft Graph Identity and Access Microsoft Graph Identity and Access No
Microsoft Graph Identity and Access Incoming Mapper Mapper (In) Microsoft Graph Identity and Access — No
Microsoft Graph Mail Mapper Mapper (In) Microsoft Graph Mail — No
Microsoft Graph Mail Single User - Classifier Classification Microsoft Graph Mail — No
Microsoft Graph Mail Single User - Incoming Mapper Mapper (In) Microsoft Graph Mail — No
Microsoft Sentinel - Classifier Classification Microsoft Sentinel Microsoft Sentinel Incident No
Microsoft Sentinel - Incoming Mapper Mapper (In) Microsoft Sentinel — No
Microsoft Sentinel - Outgoing Mapper Mapper (Out) Microsoft Sentinel — No
MobileIron Incident Incoming Mapper Mapper (In) MobileIron-UEM — No
NTT Cyber Threat Sensor - Classifier Classification NTT Cyber Threat Sensor TD Incident No
NTT Cyber Threat Sensor - Incoming Mapper Mapper (In) NTT Cyber Threat Sensor — No
Neosec - Incoming Mapper Mapper (In) Neosec — No
Netcraft Incoming Mapper Mapper (In) Netcraft — No
Netscout Arbor Sightline - Incoming Mapper Mapper (In) Netscout Arbor Sightline — No
Netskope Classifier Classification Netskope — No
Netskope Mapper Mapper (In) Netskope — No
Netskope Outgoing Mapper Mapper (Out) Netskope — No
Nutanix Hypervisor - Incoming Mapper Mapper (In) Nutanix Hypervisor — No
OTSecurity API Classifier v1 Classification OTSecurity — No
OTSecurity API Incoming Mapper v1 Mapper (In) OTSecurity — No
Okta IAM - App Sync (classifier) Classification Okta — No
Okta IAM - App Sync (mapper) Mapper (In) Okta — No
Onboarding Integration - Classifier Classification OnboardingIntegration Phishing No
Onboarding Integration - Incoming Mapper Mapper (In) OnboardingIntegration Phishing No
OpsGenie - Classifier Classification OpsGenie Unclassified No
OpsGenie - Mapper Mapper (In) OpsGenie — No
Orca Alert - Classification Classification Orca Orca Alert No
Orca Mapper Mapper (In) Orca — No
Palo Alto Networks Prisma Cloud Compute - Classifier Classification Prisma Cloud Compute by Palo Alto Networks — No
Palo Alto Networks Prisma Cloud Compute - Incoming Mapper Mapper (In) Prisma Cloud Compute by Palo Alto Networks — No
Panorama Classifier Classification PAN-OS by Palo Alto Networks Unclassified No
Panorama Mapper Mapper (In) PAN-OS by Palo Alto Networks — No
PhishER-mapper Mapper (In) PhishER — No
PhishUp Gmail Mapper Mapper (In) PhishUp — No
PingCastle-Report-Classifier Classification PingCastle PingCastle No
PingCastle-Report-Mapper Mapper (In) PingCastle — No
Prisma Cloud - Classifier Classification Prisma Cloud by Palo Alto Networks Prisma Cloud No
Prisma Cloud - Incoming Mapper Mapper (In) Prisma Cloud by Palo Alto Networks Prisma Cloud No
Prisma Cloud App - Classifier Classification Prisma Cloud by Palo Alto Networks — No
Prisma Cloud App - Incoming Mapper Mapper (In) Prisma Cloud by Palo Alto Networks — No
Proofpoint Cloud Threat Response - Incoming Mapper Mapper (In) Proofpoint Cloud Threat Response — No
Proofpoint TAP Classifier Classification Proofpoint TAP — No
Proofpoint TAP Mapper Mapper (In) Proofpoint TAP — No
QRadar - Classifier Classification IBM QRadar — No
QRadar - Generic Incoming Mapper Mapper (In) IBM QRadar — No
QRadar - Incoming Mapper Mapper (In) IBM QRadar — No
QSS Classifier Classification Quantum Security Systems — No
QSS Mapper Mapper (In) Quantum Security Systems — No
QualysFIM Mapper Mapper (In) QualysFIM — No
QualysFim Classifier Classification QualysFIM Qualys-Fim No
RF - Classifier Classification Recorded Future RF Playbook Alert No
RF - Incoming Mapper Mapper (In) Recorded Future — No
RSA NetWitness v11.5 - incoming mapper Mapper (In) NetWitness — No
RaDark - Incoming Mapper Mapper (In) KELA RaDark — No
Rapid7 InsightIDR - Classifier Classification Rapid7 InsightIDR Rapid7 InsightIDR Alert No
Rapid7 InsightIDR - Incoming Mapper Mapper (In) Rapid7 InsightIDR — No
Rapid7 ThreatCommand - Incoming Mapper Mapper (In) Rapid7 - Threat Command (IntSights) — No
Reco Incident Mapper Mapper (In) Reco — No
Recorded Future - Classifier Classification Recorded Future Intelligence Recorded Future Alert No
Recorded Future - Incoming Mapper Mapper (In) Recorded Future Intelligence — No
Recorded Future ASI - Incoming Mapper Mapper (In) Recorded Future Attack Surface Intelligence — No
Recorded Future Identity - Incoming Mapper Mapper (In) Recorded Future Identity — No
Recorded Future Playbook Alert Classifier Classification Recorded Future Intelligence Recorded Future Playbook Alert No
Recorded Future Playbook Alert Mapper Mapper (In) Recorded Future Intelligence — No
Reliaquest GreyMatter DRP Incidents Classifier Classification ReliaQuest Digital Risk Protection — No
Reliaquest GreyMatter DRP Incidents Mapper Mapper (In) ReliaQuest Digital Risk Protection — No
Reliaquest Takedown Classifier Classification ReliaQuest Digital Risk Protection — No
Reliaquest Takedown Mapper Mapper (In) ReliaQuest Digital Risk Protection — No
Rubrik Polaris Radar - Classification Classification Rubrik Security Cloud — No
Rubrik Polaris Radar - Mapping Mapper (In) Rubrik Security Cloud — No
SOCRadar Incident Classifier Classification SOCRadar SOCRadar Generic No
SOCRadar Incident Mapper Mapper (In) SOCRadar — No
Saas Security - Incoming Mapper Mapper (In) SaaS Security by Palo Alto Networks — No
Saas Security - Outgoing Mapper Mapper (Out) SaaS Security by Palo Alto Networks — No
SafeNet Trusted Access – Alert Classifier Classification Thales SafeNet Trusted Access — No
SafeNet Trusted Access – Alert Mapper Mapper (In) Thales SafeNet Trusted Access — No
SafeNet Trusted Access – Push Reject Alert Classifier Classification Thales SafeNet Trusted Access — No
SafeNet Trusted Access – Push Reject Alert Mapper Mapper (In) Thales SafeNet Trusted Access — No
SailPoint IdentityIQ Alert Classifier Classification SailPoint IdentityIQ SailPoint IdentityIQ Alert No
SailPoint IdentityIQ Alert Mapper Mapper (In) SailPoint IdentityIQ — No
SailPoint IdentityNow Trigger Mapper Mapper (In) SailPoint IdentityNow — No
SecurityScorecard Alert Mapper Mapper (In) SecurityScorecard — No
Securonix Incident - Incoming Mapper Mapper (In) Securonix — No
Securonix Threat - Incoming Mapper Mapper (In) Securonix — No
Sekoia XDR - Classifier Classification SekoiaXDR Sekoia XDR No
Sekoia XDR - Incoming Mapper Mapper (In) SekoiaXDR — No
SentinelOne - Outgoing Mapper Mapper (Out) SentinelOne — No
SentinelOne Classifier Classification SentinelOne SentinelOne Incident No
SentinelOne Incoming Mapper Mapper (In) SentinelOne — No
ServiceNow - Incoming Mapper Mapper (In) ServiceNow ServiceNow Ticket No
ServiceNow - Outgoing Mapper Mapper (Out) ServiceNow ServiceNow Ticket No
ServiceNow Classifier Classification ServiceNow ServiceNow Ticket No
ServiceNow Create Ticket - Incoming Mapper Mapper (In) ServiceNow ServiceNow Ticket No
ServiceNow Create Ticket - Outgoing Mapper Mapper (Out) ServiceNow — No
Skyhigh Security Incident Classification Skyhigh Security SSE Skyhigh Security Alert No
Skyhigh Security Incoming Mapper Mapper (In) Skyhigh Security SSE — No
Slack Classifier Classification Slack — No
Slack Mapper Mapper (In) Slack — No
Smokescreen IllusionBLACK - Classifier Classification Smokescreen IllusionBLACK — No
Smokescreen IllusionBLACK - Incoming Mapper Mapper (In) Smokescreen IllusionBLACK — No
SolarWinds Classification SolarWinds SolarWinds Alert No
SolarWinds Alert - Incoming Mapper Mapper (In) SolarWinds — No
SolarWinds Event - Incoming Mapper Mapper (In) SolarWinds — No
Sophos Central - Classifier Classification Sophos Central — No
Sophos Central - Incoming Mapper Mapper (In) Sophos Central — No
SpecterOpsBloodHoundEnterprise - Classifier Classification SpecterOpsBloodHoundEnterprise SpecterOpsBloodHoundEnterprise Attack Path No
SpecterOpsBloodHoundEnterprise - Incoming Mapper Mapper (In) SpecterOpsBloodHoundEnterprise — No
Splunk - Classifier Classification Splunk — No
Splunk - Incoming Mapper Mapper (In) Splunk — No
Splunk - Notable Generic Incoming Mapper Mapper (In) Splunk — No
Splunk - Notable Generic Outgoing Mapper Mapper (Out) Splunk — No
Splunk ES - Incoming Mapper Mapper (In) Splunk — No
Splunk ES - Outgoing Mapper Mapper (Out) Splunk — No
Splunk Finding - Incoming Mapper Mapper (In) Splunk — No
Splunk Finding - Outgoing Mapper Mapper (Out) Splunk — No
SplunkPyV2 - Classifier Classification Splunk — No
SpyCloud - Classifier Classification SpyCloud Enterprise Protection — No
SpyCloud - Incoming Mapper Mapper (In) SpyCloud Enterprise Protection — No
Stamus Networks incoming mapper Mapper (In) Stamus — No
Stellar Cyber - Incoming Mapper Mapper (In) Stellar Cyber Stellar Cyber Case No
Stellar Cyber Classifier Classification Stellar Cyber Stellar Cyber Case No
Sumo Logic Cloud SIEM Classifier Classification Sumo Logic Cloud SIEM — No
Sumo Logic Insight - Mapper Mapper (In) Sumo Logic Cloud SIEM — No
Sumo Logic Insight Classifier Classification Sumo Logic Cloud SIEM — No
Symantec DLP - Classifier Classification Symantec Data Loss Prevention — No
Symantec DLP - Incoming Mapper Mapper (In) Symantec Data Loss Prevention — No
Symantec EDR - Incident Classifier Classification Symantec Endpoint Detection and Response — No
Symantec EDR - Incoming Mapper Mapper (In) Symantec Endpoint Detection and Response — No
Symantec EDR Event- Incoming Mapper Mapper (In) Symantec Endpoint Detection and Response — No
Symantec Email Security Cloud - Classifier Classification SymantecEmailSecurity — No
Symantec Email Security Cloud - Mapper Mapper (In) SymantecEmailSecurity — No
SysAid Classifier Classification SysAid SysAid Incident No
SysAid Mapper Mapper (In) SysAid — No
Sysdig Mapper Runtime Event Mapper (In) Sysdig Response Actions — No
TOPdesk Incident Classifier Classification TOPdesk TOPdesk Incident No
TOPdesk Incoming Mapper Mapper (In) TOPdesk TOPdesk Incident No
TOPdesk Outgoing Mapper Mapper (Out) TOPdesk — No
Tanium Threat Response Mapper (In) Tanium Threat Response — No
TheHive - Classifier Classification TheHive Project TheHive No
TheHive - Incoming Mapper Mapper (In) TheHive Project — No
TheHive - Outgoing Mapper Mapper (Out) TheHive Project — No
Thinkst Canary - Incoming Mapper Mapper (In) Thinkst Canary — No
Threat Vault Mapper (In) Threat Vault by Palo Alto Networks — No
Threat Vault classifier Classification Threat Vault by Palo Alto Networks — No
Threatconnect Mapper (incoming) Mapper (In) ThreatConnect — No
Threatconnect classifier Classification ThreatConnect — No
Trellix Incident Classifier Classification Trellix Email Security - Cloud Trellix Incident No
Trellix Mapper Mapper (In) Trellix Email Security - Cloud — No
Trello - Incoming Mapper Mapper (In) Trello — No
Trend Micro Vision One V3 XDR - Incoming Mapper Mapper (In) TrendAI Vision One™ — No
Trend Micro Vision One V3 XDR - Outgoing Mapper Mapper (Out) TrendAI Vision One™ Trend Micro Vision One XDR Incident No
Trend Micro Vision One XDR - Incoming Mapper Mapper (In) TrendAI Vision One™ — No
TrendMicroCAS - incoming - mapper Mapper (In) TrendAI™ Cloud App Security — No
Tripwire - Classifier Classification Tripwire Tripwire File Change No
Tripwire - Incoming Mapper Mapper (In) Tripwire — No
USTA Incident Classifier Classification USTA Cyber Threat Intelligence Platform — No
USTA Incident Mapper Mapper (In) USTA Cyber Threat Intelligence Platform — No
UnifiVideo_classifier Classification UnifiVideo NVR — No
UnifiVideo_mapper Mapper (In) UnifiVideo NVR — No
User Profile - Active Directory (Incoming) Mapper (In) Active Directory Query — No
User Profile - Active Directory (Outgoing) Mapper (Out) Active Directory Query — No
User Profile - Clarizen (Incoming) Mapper (In) Clarizen IAM — No
User Profile - Clarizen (Outgoing) Mapper (Out) Clarizen IAM — No
User Profile - ExceedLMS (Incoming) Mapper (In) Exceed LMS — No
User Profile - ExceedLMS (Outgoing) Mapper (Out) Exceed LMS — No
User Profile - HelloIAMWorld (Incoming) Mapper (In) Hello World IAM — No
User Profile - HelloIAMWorld (Outgoing) Mapper (Out) Hello World IAM — No
User Profile - Okta (Incoming) Mapper (In) Okta — No
User Profile - Okta (Outgoing) Mapper (Out) Okta — No
User Profile - PrismaCloud (Incoming) Mapper (In) Prisma Cloud by Palo Alto Networks — No
User Profile - PrismaCloud (Outgoing) Mapper (Out) Prisma Cloud by Palo Alto Networks — No
User Profile - SCIM (Incoming) Mapper (In) IAM SCIM — No
User Profile - SCIM (Outgoing) Mapper (Out) IAM SCIM — No
User Profile - Salesforce (Incoming) Mapper (In) Salesforce — No
User Profile - Salesforce (Outgoing) Mapper (Out) Salesforce — No
User Profile - Salesforce Fusion (Incoming) Mapper (In) Salesforce Fusion — No
User Profile - Salesforce Fusion (Outgoing) Mapper (Out) Salesforce Fusion — No
User Profile - ServiceNow (Incoming) Mapper (In) ServiceNow — No
User Profile - ServiceNow (Outgoing) Mapper (Out) ServiceNow — No
Varonis DSP Incident - Incoming Mapper Mapper (In) Varonis Data Security Platform — No
Varonis SaaS Incident - Incoming Mapper Mapper (In) Varonis SaaS — No
Varonis SaaS Incident - Outgoing Mapper Mapper (Out) Varonis SaaS — No
Vectra Detect Classification Vectra AI Vectra Detection No
Vectra Detect - Incoming Mapper Mapper (In) Vectra AI — No
Vectra RUX - Incoming Mapper Mapper (In) Vectra RUX — No
Vectra XDR - Incoming Mapper Mapper (In) Vectra XDR — No
Veeam Backup & Replication Incidents Classifier Classification Veeam App — No
Veeam Backup & Replication Incoming Mapper Mapper (In) Veeam App — No
Veeam One Incidents Classifier Classification Veeam App — No
Veeam One Incoming Mapper Mapper (In) Veeam App — No
VirusTotal Intelligence LiveHunt Notification Mapper (In) VirusTotal — No
Wiz - Outgoing Mapper Mapper (Out) Wiz — No
Wiz Classifier Classification Wiz Wiz Issue No
Wiz Mapper Mapper (In) Wiz — No
Wiz Mapper Webhook Mapper (In) Wiz — No
WizDefend Mapper Mapper (In) Wiz — No
XDR - Incoming Mapper Mapper (In) Cortex XDR by Palo Alto Networks — No
XDR - Incoming Mapper CTF Mapper (In) Capture The Flag - 01 — No
XM Cyber Entity from Crowdstrike Mapper (In) XM Cyber — No
XM Cyber Incident Classifier Classification XM Cyber XM Cyber Choke Point No
XM Cyber Incident Mapper Mapper (In) XM Cyber — No
XMCO - Serenety Mapper Mapper (In) XMCO — No
XSOAR Incoming Mapper Mapper (In) XSOAR Mirroring — No
Xpanse - Classifier Classification Cortex Xpanse Xpanse Alert No
Xpanse - Incoming Mapper Mapper (In) Cortex Xpanse — No
Zendesk - Incoming Mapper Mapper (In) Zendesk — No
ZeroFox Key Incidents (incoming) Mapper (In) ZeroFox — No
ZeroFox Mapping Mapper (In) ZeroFox — No
ZeroTrustAnalyticsPlatform - Incoming Mapper Mapper (In) Zero Trust Analytics Platform ZTAP Alert No
ZeroTrustAnalyticsPlatform - Outgoing Mapper Mapper (Out) Zero Trust Analytics Platform ZTAP Alert No
Zimperium - Classifier Classification Zimperium Zimperium Event No
Zimperium - Incoming Mapper Mapper (In) Zimperium — No
Zimperium v2 - Incoming Mapper Mapper (In) Zimperium — No
classifier-mapper-incoming-JiraV2 Mapper (In) Atlassian Jira — No
classifier-mapper-incoming-JiraV3 Mapper (In) Atlassian Jira — No
classifier-mapper-outgoing-Jira Mapper (Out) Atlassian Jira — No
trend micro cas classifier Classification TrendAI™ Cloud App Security Trend Micro CAS Event No
xDome - Classifier Classification Claroty xDome Claroty xDome Alert No
xDome - Incoming Mapper Mapper (In) Claroty xDome — No