Modeling Rules

273 modeling rules.

Name Pack From Version To Version
AMP Modeling Rule Cisco AMP 8.15.0 current
AWS ELB Modeling Rule AWS Elastic Load Balancing 8.4.0 current
AWS Security Hub Modeling Rule AWS - Security Hub 6.10.0 current
AWS WAF Modeling Rule AWS WAF 8.2.0 current
AWSGuardDuty Modeling Rule AWS - GuardDuty 8.15.0 current
Abnormal Security Modeling Rule Abnormal Security 8.4.0 current
Absolute Modeling Rule Absolute 8.15.0 current
Admin By Request Modeling Rule Admin By Request 6.10.0 current
Akamai GuardiCore Modeling Rule Akamai GuardiCore 8.15.0 current
Akamai WAF Modeling Rule Akamai WAF SIEM 8.15.0 current
Alibaba Modeling Rule Alibaba Action Trail 6.10.0 current
Amazon AWS CloudTrail Modeling Rule AWS - CloudTrail 8.7.0 current
Anthropic Claude Modeling Rule Anthropic Claude 8.15.0 current
Apache Tomcat Apache Tomcat 8.15.0 current
Apache Web Server Apache Web Server 6.10.0 current
AppSentinels AppSentinels Modeling Rule AppSentinels.ai 8.4.0 current
Arista Switch Modeling Rules Arista Switch 8.2.0 current
Armis Security Modeling Rule Armis 8.15.0 current
Atlassian Confluence Modeling Rule Atlassian Confluence Cloud 8.4.0 current
Atlassian Jira Modeling Rule Atlassian Jira Data Center 8.4.0 current
Auth0 Okta Modeling Rule Okta Auth0 8.15.0 current
Avaya Aura Communication Manager Modeling Rule Avaya Aura Communication Manager 8.15.0 current
Azure AKS Modeling Rule Azure Kubernetes Services 8.15.0 current
Azure App Service Modeling Rule Azure App Service 8.7.0 current
Azure DevOps Modeling Rule AzureDevOps 8.15.0 current
Azure Events Hub Modeling Rule Microsoft Azure Events Hub (Deprecated) 8.15.0 current
Azure Firewall Modeling Rule Azure Firewall 8.7.0 current
Azure FlowLogs Modeling Rule AzureFlowLogs 8.5.0 current
Azure WAF Modeling Rule Azure WAF 8.5.0 current
Barracuda Cloudgen Firewall Modeling Rule Barracuda Cloudgen Firewall 8.15.0 current
Barracuda Email Protection Barracuda Email Protection 8.15.0 current
Barracuda WAF Barracuda WAF 8.2.0 current
BeyondTrust EPM Modeling Rule BeyondTrustEPM 8.4.0 current
BeyondTrust Password Safe Modeling Rule BeyondTrust Password Safe 8.15.0 current
BeyondTrust Privileged Remote Access Modeling Rule Beyond Trust Privileged Remote Access 6.10.0 current
BeyondTrust Remote Support Modeling Rule Beyond Trust Remote Support 8.15.0 current
BitSight BitSight Modeling Rule Bitsight 8.4.0 current
Bitbucket Modeling Rule Bitbucket 8.4.0 current
Bitwarden PasswordManager Modeling Rule Bitwarden Password Manager 8.4.0 current
BloodHound Enterprise Modeling Rule BloodHound Enterprise (Deprecated) 8.4.0 current
Bluecat Address Manager Modeling Rule Bluecat Address Manager 8.4.0 current
BoxEventCollector Box 8.15.0 current
Brocade Switch Modeling Rule Brocade Switch 6.10.0 current
Celonis Celonis Modeling Rule Celonis 8.15.0 current
CheckPoint Firewall Collection Check Point Firewall 8.15.0 current
Cisco ASA Modeling Rule Cisco ASA 8.11.0 current
Cisco AppDynamics Modeling Rule Cisco AppDynamics 8.15.0 current
Cisco Catalyst Modeling Rule Cisco Catalyst 6.10.0 current
Cisco ESA Modeling Rule Cisco Email Security Appliance (IronPort) 6.10.0 current
Cisco ISE Modeling Rule Cisco ISE 8.3.0 current
Cisco ISR Modeling Rule Cisco ISR 8.15.0 current
Cisco Meraki Modeling Rule Cisco Meraki 6.10.0 current
Cisco Stealthwatch Modeling Rule Cisco Secure Network Analytics (Stealthwatch) 8.15.0 current
Cisco ThousandEyes Modeling Rule Cisco ThousandEyes 8.7.0 current
Cisco UCM Modeling Rule Cisco UCM 8.5.0 current
Cisco Umbrella Cloud Security Modeling Rule Cisco Umbrella cloud security 8.15.0 current
Cisco WLC Modeling Rule Cisco Wireless LAN Controller 8.15.0 current
Cisco Webex Modeling Rule Cisco Webex Teams 8.15.0 current
CiscoASR Modeling Rule Cisco ASR 8.4.0 current
CiscoFirepower Modeling Rule Cisco Firepower 8.15.0 current
CiscoNexus Modeling Rule Cisco Nexus 8.15.0 current
CiscoSMA Modeling Rule CiscoSMA 8.15.0 current
Citrix ADC Modeling Rule Citrix ADC 8.15.0 current
Citrix Cloud Modeling Rule Citrix 8.4.0 current
Claroty Modeling Rule Claroty 8.3.0 current
Clearswift DLP Modeling Rules Clearswift DLP 8.2.0 current
Cloudflare WAF Modeling Rule Cloudflare WAF 8.2.0 current
Cloudflare Zero Trust Modeling Rule Cloudflare Zero Trust 8.7.0 current
Code42 Code42 Modeling Rule Code42 8.15.0 current
Cohesity Helios Modeling Rule Cohesity Helios 8.15.0 current
Commvault Backup Solutions Modeling Rule Commvault Backup Solutions 8.15.0 current
Corelight Zeek Modeling Rule Corelight Zeek 8.15.0 current
CybelAngel Platform Modeling Rule CybelAngel 8.15.0 current
CyberArk EPM Modeling Rule CyberArk Endpoint Privilege Manager 8.15.0 current
CyberArk ISP Modeling Rule CyberArk 8.4.0 current
CyberArk PTA Modeling Rule CyberArk Privileged Threat Analytics 8.15.0 current
CyberArkEPV Modeling Rule CyberArk PAM Self-Hosted 8.3.0 current
CyberArkIdentityEventCollector CyberArk Identity 6.10.0 current
Darktrace Modeling Rule Darktrace 8.2.0 current
Defender For Cloud Microsoft Modeling Rule Microsoft Defender for Cloud 6.10.0 current
Delinea ALM Modeling Rule Delinea Account Lifecycle Manager 6.10.0 current
Delinea Secret Server Delinea Secret Server 8.15.0 current
Dell EMC Unity Modeling Rule Dell EMC Unity 8.3.0 current
Digital Guardian ARC Modeling Rule Digital Guardian 8.2.0 current
Digital Shadows Modeling Rule ReliaQuest Digital Risk Protection 8.4.0 current
Docusign Docusign Modeling Rule Docusign 8.4.0 current
Dragos Platform Modeling Rule Dragos Platform 8.5.0 current
DropboxEventCollector Dropbox 6.10.0 current
Druva Druva Modeling Rule Druva 8.6.0 current
Duo 2.0 Modeling Rule DUO Admin 8.15.0 current
Endpoint Protection WithSecure Modeling Rule WithSecure 6.10.0 current
Exabeam Modeling Rule Exabeam Advanced Analytics 8.4.0 current
ExtraHop RevealX Modeling Rule ExtraHop Reveal(x) 8.4.0 current
F5 APM Modeling Rule F5 APM 8.3.0 current
F5 ASM F5 ASM 6.10.0 current
F5 BIG-IP Advanced WAF Modeling Rule F5 BIG-IP Advanced WAF 8.4.0 current
F5LTM Modeling Rule F5 LTM 8.15.0 current
FireEye HX Modeling Rule FireEye HX 6.8.0 current
FireEye NX Modeling Rule FireEye Network Security (NX) 6.10.0 current
Forcepoint DLP Modeling Rule Forcepoint DLP 8.15.0 current
Forcepoint Email Security Modeling Rules Forcepoint Email Security 8.15.0 current
Forcepoint NGFW Modeling Rule Forcepoint Web Security 6.10.0 current
Forcepoint Secure Web Gateway Forcepoint Secure Web Gateway 8.2.0 current
ForeScout CounterACT Modeling Rule ForeScout NAC - CounterACT 8.5.0 current
Fortimail Modeling Rule Fortimail 8.15.0 current
Fortinet FortiGate Modeling Rule FortiGate 6.10.0 current
Fortinet FortiManager Modeling Rule FortiManager 8.15.0 current
Fortinet Fortiweb Modeling Rule Fortinet Fortiweb 8.15.0 current
Genesys Cloud Modeling Rule Genesys Cloud 8.4.0 current
Genetec Security Center Modeling Rule Genetec Security Center 8.4.0 current
GitGuardian Modeling Rule GitGuardian 8.15.0 current
Github Modeling Rule GitHub 6.10.0 current
Gitlab Modeling Rule GitLab 8.15.0 current
Google Apigee Edge Modeling Rule Google Apigee Edge 8.8.0 current
Google Chrome Modeling Rule Google Chrome 8.4.0 current
Google Cloud Logging Modeling Rule Google Cloud Logging 8.5.0 current
Google Cloud SCC Modeling Rule Google Cloud SCC 8.15.0 current
Google Drive Modeling Rule Google Drive 8.15.0 current
HPE Aruba Central Modeling Rule HPE Aruba Central 8.15.0 current
HPE Aruba ClearPass Modeling Rule HPE Aruba Clearpass 8.3.0 current
HPE Switch Modeling Rule HPE Switch 8.5.0 current
Halcyon Halcyon Modeling Rule Halcyon 8.13.0 current
HashiCorp Vault Modeling Rule HashiCorp Vault 8.15.0 current
HelloWorld Modeling Rule HelloWorld 8.15.0 current
Huawei FW Modeling Rule Huawei FW 8.15.0 current
Huawei Network Devices Modeling Rule Huawei Network Devices 8.15.0 current
IBM AIX Modeling Rule IBM AIX 8.3.0 current
IBM Guardium Modeling Rule IBM Guardium 8.15.0 current
IBM LDAP Modeling Rule IBM Directory Server for IBM (LDAP) 8.4.0 current
IBM MaaS360 Security Modeling Rule IBM MaaS360 Security 8.15.0 current
IBM Security Verify Modeling Rule IBM Security Verify 8.6.0 current
IBM Storage Scale Modeling Rule IBM Storage Scale 8.4.0 current
IRONSCALES Modeling Rule Ironscales Event Collector 8.15.0 current
Illusive Networks Illusive Networks 6.10.0 current
Imperva Incapsula Modeling Rule Imperva Incapsula 8.15.0 current
Imperva WAF Modeling Rule Imperva WAF 6.10.0 current
Infoblox Blox One Threat Defense Modeling Rule Infoblox Threat Defense with DDI 6.10.0 current
Infoblox Modeling Rules Infoblox NIOS 6.10.0 current
Ivanti Connect Secure Modeling Rules Ivanti Connect Secure 8.15.0 current
Ivanti VTM Modeling Rule Ivanti Pulse Secure VTM 8.15.0 current
JamfProtect Modeling Rule JamfProtect 8.15.0 current
JiraEventCollector Atlassian Jira 8.15.0 current
Juniper SRX JuniperSRX 8.15.0 current
Keeper Security Modeling Rule Keeper Security 8.15.0 current
Kiteworks Modeling Rule Kiteworks 8.15.0 current
KnowBe4KMSATEventCollector KMSAT 6.10.0 current
Kubernetes Modeling Rule Kubernetes 8.15.0 current
LenelS2 NetBox Modeling Rule LenelS2 NetBox 8.4.0 current
Linux Events Collection Modeling Rule Linux Events Collection 8.15.0 current
Lookout Mobile Endpoint Security Modeling Rule Lookout Mobile Endpoint Security (MES) 8.11.0 current
MacOS Modeling Rule MacOS 8.2.0 current
Macfee Web Gateway Modeling Rule McAfee Web Gateway 8.15.0 current
Manage Engine Modeling Rule ManageEngine 8.2.0 current
ManageEngine ADSelfService Plus Modeling Rule ManageEngine ADSelfService Plus 8.15.0 current
ManageEngine-ADAudit Modeling Rule ManageEngine ADAudit Plus 8.15.0 current
ManageEngine-ADManager Modeling Rule ManageEngine ADManager Plus 6.10.0 current
McAfee Database Security Modeling Rule McAfee Database Security 8.15.0 current
McAfee NSM Modeling Rule McAfee NSM 8.2.0 current
Mcafee Epo Modeling Rule McAfee ePO 8.15.0 current
Menlo Security Modeling Rule Menlo Security 8.4.0 current
Microsoft 365 Defender Event Collector Modeling Rule Microsoft Defender for Endpoint 6.10.0 current
Microsoft ADFS Collection Microsoft AD FS Collection 8.3.0 current
Microsoft Advanced Threat Analytics Modeling Rule Microsoft Advanced Threat Analytics 6.10.0 current
Microsoft DHCP Modeling Rule Microsoft DHCP 8.15.0 current
Microsoft DNS Modeling Rule Microsoft DNS 8.4.0 current
Microsoft Defender Cloud Apps Modeling Rule Microsoft Defender for Cloud Apps 8.15.0 current
Microsoft Defender for Identity Modeling Rule Microsoft Defender for Identity 6.10.0 current
Microsoft Exchange Server Modeling Rule Microsoft Exchange Server 6.10.0 current
Microsoft Graph Security Modeling Rules Microsoft Graph Security 8.2.0 current
Microsoft IIS Web Server Microsoft IIS Web Server 6.10.0 current
Microsoft Intune Microsoft Intune 8.15.0 current
Microsoft NPS Modeling Rule Microsoft NPS 6.10.0 current
Microsoft System Center Configuration Manager Microsoft Endpoint Configuration Manager 6.10.0 current
Microsoft WSUS Modeling Rule MicrosoftWSUS 6.10.0 current
Microsoft Windows AMSI Security Modeling Rule Microsoft Windows AMSI 8.3.0 current
Microsoft Windows Sysmon Modeling Rule Microsoft Sysmon 8.4.0 current
MicrosoftEntraID Modeling Rule Azure Logs 8.15.0 current
MicrosoftWindowsEvents Microsoft Windows Event Logs 8.15.0 current
Mimecast Modeling Rule Mimecast 6.10.0 current
Monday Monday Modeling Rule Monday 8.4.0 current
MongoDB Atlas Modeling Rule MongoDB Atlas 8.4.0 current
MySQL Enterprise Modeling Rules MySQL Enterprise 6.10.0 current
NGINX Web Server NGINX Web Server 6.10.0 current
NVIDIA DOCA Argus Modeling Rule NVIDIA DOCA Argus 8.4.0 current
Nasuni File Services Modeling Rule Nasuni File Services 8.15.0 current
NetBox IRM Modeling Rule NetBox 6.10.0 current
Netmotion VPN Modeling Rule Netmotion VPN 8.15.0 current
Netskope Modeling Rule Netskope 6.10.0 current
Office 365 Modeling Rule Office 365 8.15.0 current
Okta 2.0 Modeling Rule Okta 8.15.0 current
Okta ASA Modeling Rule Okta ASA 8.11.0 current
Okta Access Gateway Okta Access Gateway 6.10.0 current
OneLogin Modeling Rule OneLogin 6.10.0 current
OneModel OneModel (Deprecated) 6.10.0 current
OnePassword OnePassword Modeling Rule OnePassword 8.4.0 current
OpenAI Modeling Rule OpenAI 8.15.0 current
Oracle OAM Modeling Rule Oracle IAM 8.5.0 current
OracleCloudInfrastructure Modeling Rule Oracle Cloud Infrastructure (OCI) 6.10.0 current
OracleDBEventCollector Oracle Database 8.15.0 current
Orca Modeling Rules Orca 6.10.0 current
Palo Alto Prisma Cloud Modeling Rule Prisma Cloud by Palo Alto Networks 8.15.0 current
Portnox Modeling Rule Portnox 8.3.0 current
Prisma Cloud Compute Modeling Rule Prisma Cloud Compute by Palo Alto Networks 8.3.0 current
Prisma SAAS Security Modeling Rule SaaS Security by Palo Alto Networks 8.4.0 current
Proofpoint Email Security Modeling Rule Proofpoint Email Security 8.15.0 current
Proofpoint Isolation Modeling Rule Proofpoint Isolation 8.3.0 current
Proofpoint ObserveIT Modeling Rule Proofpoint ObserveIT 8.2.0 current
Proofpoint Threat Response Modeling Rule Proofpoint Threat Response 6.10.0 current
ProofpointCASB Modeling Rule Proofpoint CASB 8.15.0 current
ProofpointServerProtection Modeling Rule Proofpoint Protection Server 8.3.0 current
ProofpointTAP Modeling Rule Proofpoint TAP 8.3.0 current
Qualys Modeling Rule Qualys 8.2.0 current
RSA SecureID Modeling Rule RSA SecurID 8.4.0 current
Radware Cloud DDoS Protection Services Modeling Rule Radware Cloud DDoS Protection Services 8.11.0 current
Radware Cloud Services Modeling Rule Radware Cloud WAF Services 8.3.0 current
Reblaze WAF Modeling Rule Reblaze WAF 8.5.0 current
Recorded Future Modeling Rule Recorded Future Intelligence 8.2.0 current
Retarus Secure Email Gateway Modeling Rule Retarus Secure Email Gateway 8.5.0 current
Riverbed Flow Gateways Modeling Rule Riverbed Flow Gateways 8.9.0 current
RunZero RunZero Modeling Rule RunZero 8.15.0 current
SafeNetTrustedAccess Modeling Rule Thales SafeNet Trusted Access 8.15.0 current
SailPoint IdentityNow Modeling Rule SailPoint IdentityNow 8.6.0 current
Salesforce Modeling Rule Salesforce 8.14.0 current
Saviynt Enterprise Identity Cloud Modeling Rule Saviynt Enterprise Identity Cloud 8.4.0 current
SecureAuth IdP Modeling Rule SecureAuth Identity Platform 8.15.0 current
Semperis DSP Modeling Rule Semperis DSP 8.3.0 current
SentinelOne Modeling Rule SentinelOne 8.15.0 current
ServiceNow ServiceNow Modeling Rule ServiceNow 8.4.0 current
Shodan Banner Modeling Rule Shodan 8.6.0 current
Siemens SiPass Modeling Rule Siemens SiPass 8.4.0 current
Silverfort Admin Console Modeling Rule Silverfort 8.15.0 current
Slack Modeling Rule Slack 8.15.0 current
SonicWallNSv Modeling Rule SonicWall NSv 8.15.0 current
Squid Modeling Rule Squid 8.15.0 current
Symantec BlueCoat ProxySG Modeling Rules Symantec BlueCoat ProxySG 6.10.0 current
Symantec Cloud Secure Web Gateway Modeling Rule Symantec Cloud Secure Web Gateway 8.4.0 current
Symantec Endpoint Protection Modeling Rule Symantec Endpoint Protection 8.15.0 current
Symantec Endpoint Security Modeling Rule Symantec Endpoint Security 8.15.0 current
SymantecCloudSOC Modeling Rule SymantecCloudSOC 6.10.0 current
SymantecDLP Modeling Rule Symantec Data Loss Prevention 8.15.0 current
Synopsys Coverity Modeling Rule Synopsys Coverity 8.15.0 current
TXOne StellarOne Modeling Rule TXOne StellarOne 8.14.0 current
Tableau Modeling Rule Tableau 8.15.0 current
Tanium Modeling Rule Tanium 8.15.0 current
Tanium Threat Response Modeling Rule Tanium Threat Response 8.4.0 current
TeamViewer Tensor Modeling Rule TeamViewer 8.15.0 current
Tenable_io Asset Collection Tenable Vulnerability Management (formerly Tenable.io) 8.5.0 current
Tenable_io Modeling Rule Tenable Vulnerability Management (formerly Tenable.io) 8.15.0 current
Thinkst Canary Modeling Rule Thinkst Canary 6.10.0 current
Tigera Calico Modeling Rule Tigera Calico 8.4.0 current
Trellix Email Security Cloud Modeling Rule Trellix Email Security - Cloud 8.15.0 current
Trellix ePO Modeling Rule Trellix_ePO 8.15.0 current
Trend Micro Email Security Modeling Rule Trend Micro Email Security 8.15.0 current
Trend Micro TippingPoint Modeling Rule Trend Micro TippingPoint 8.2.0 current
TrendAI Vision One™ Modeling Rule TrendAI Vision One™ 6.10.0 current
TrendAI™ Deep Security™ Modeling Rule TrendAI™ Deep Security™ 8.15.0 current
TrendMicro InterScan Web Security Suite Modeling Rule Trend Micro InterScan Web Security 8.4.0 current
Ubiquiti Unifi Modeling Rule Ubiquiti Unifi 8.15.0 current
Unix Auditd Modeling Rule Auditd 8.15.0 current
VMWare Carbon Black Cloud Modeling Rule Carbon Black Endpoint Standard 8.15.0 current
VMWare NSX Modeling Rule VMWare NSX 8.15.0 current
VMware ESXi Modeling Rule VMware ESXi 8.15.0 current
VMware Vcenter 2.9 Modeling Rule VMware vCenter 8.13.0 current
Vectra AI Event Collector Modeling Rule Vectra AI 6.10.0 current
Watchguard Firebox Private Access Modeling Rule WatchguardFirebox 6.10.0 current
Workday Modeling Rule Workday 8.15.0 current
Zero Networks Segment Modeling Rule Zero Networks Segment 8.15.0 current
Zoom Modeling Rule Zoom 6.10.0 current
Zscaler Internet Access Modeling Rule Zscaler Internet Access 8.15.0 current
Zscaler Private Access Modeling Rule ZscalerZPA 8.15.0 current
cyfirma decyfir Modeling Rule DeCYFIR 8.4.0 current
iManage Threat Modeling Rule iManage Threat Manager 8.15.0 current
jamf Modeling Rule Jamf 8.15.0 current