Modeling Rules

327 modeling rules.

Name Pack From Version
AMP Modeling Rule Cisco AMP 8.3.0
AWS ELB Modeling Rule AWS Elastic Load Balancing 8.4.0
AWS Security Hub Modeling Rule AWS - Security Hub 6.10.0
AWS WAF Modeling Rule AWS WAF 8.2.0
AWSGuardDuty Modeling Rule AWS - GuardDuty 6.10.0
AWSGuardDuty Modeling Rule AWS - GuardDuty 6.8.0
Abnormal Security Event Collector Abnormal Security 3.3.0
Abnormal Security Modeling Rule Abnormal Security 8.4.0
Absolute Modeling Rule Absolute 8.4.0
Admin By Request Modeling Rule Admin By Request 6.10.0
Akamai GuardiCore Modeling Rule Akamai GuardiCore 8.12.0
Akamai WAF Modeling Rule Akamai WAF SIEM 8.4.0
Alibaba Modeling Rule Alibaba Action Trail 6.8.0
Alibaba Modeling Rule Alibaba Action Trail 6.10.0
Amazon AWS CloudTrail Modeling Rule AWS - CloudTrail 8.7.0
Anthropic Claude Modeling Rule Anthropic Claude 8.5.0
Apache Tomcat Apache Tomcat 6.10.0
Apache Tomcat Apache Tomcat 6.8.0
Apache Web Server Apache Web Server 6.8.0
Apache Web Server Apache Web Server 6.10.0
AppSentinels AppSentinels Modeling Rule AppSentinels.ai 8.4.0
Arista Switch Modeling Rules Arista Switch 8.2.0
Armis Security Modeling Rule Armis 6.10.0
Atlassian Confluence Modeling Rule Atlassian Confluence Cloud 8.4.0
Atlassian Jira Modeling Rule Atlassian Jira Data Center 8.4.0
Auth0 Okta Modeling Rule Okta Auth0 8.2.0
Avaya Aura Communication Manager Modeling Rule Avaya Aura Communication Manager 8.4.0
Azure AKS Modeling Rule Azure Kubernetes Services 8.5.0
Azure App Service Modeling Rule Azure App Service 8.7.0
Azure DevOps Modeling Rule AzureDevOps 8.5.0
Azure Events Hub Modeling Rule Microsoft Azure Events Hub (Deprecated) 6.10.0
Azure Events Hub Modeling Rule Microsoft Azure Events Hub (Deprecated) 6.8.0
Azure Firewall Modeling Rule Azure Firewall 8.7.0
Azure FlowLogs Modeling Rule AzureFlowLogs 8.5.0
Azure WAF Modeling Rule Azure WAF 8.5.0
Barracuda Cloudgen Firewall Modeling Rule Barracuda Cloudgen Firewall 8.11.0
Barracuda Email Protection Barracuda Email Protection 8.2.0
Barracuda WAF Barracuda WAF 8.2.0
BeyondTrust EPM Modeling Rule BeyondTrustEPM 8.4.0
BeyondTrust Password Safe Modeling Rule BeyondTrust Password Safe 8.4.0
BeyondTrust Privileged Remote Access Modeling Rule Beyond Trust Privileged Remote Access 6.10.0
BeyondTrust Remote Support Modeling Rule Beyond Trust Remote Support 8.4.0
BitSight BitSight Modeling Rule Bitsight 8.4.0
Bitbucket Modeling Rule Bitbucket 8.4.0
Bitwarden PasswordManager Modeling Rule Bitwarden Password Manager 8.4.0
BloodHound Enterprise Modeling Rule BloodHound Enterprise 8.4.0
Bluecat Address Manager Modeling Rule Bluecat Address Manager 8.4.0
BoxEventCollector Box 6.0.0
BoxEventCollector Box 6.10.0
Brocade Switch Modeling Rule Brocade Switch 6.10.0
Brocade Switch Modeling Rule Brocade Switch 6.8.0
Celonis Celonis Modeling Rule Celonis 8.4.0
Check Point Firewall Modeling Rule Check Point Firewall 6.8.0
CheckPoint Firewall Collection Check Point Firewall 6.10.0
Cisco CiscoSMA 6.8.0
Cisco ASA Modeling Rule Cisco ASA 8.11.0
Cisco AppDynamics Modeling Rule Cisco AppDynamics 8.4.0
Cisco Catalyst Modeling Rule Cisco Catalyst 6.10.0
Cisco ESA Modeling Rule Cisco Email Security Appliance (IronPort) 6.10.0
Cisco ISE Modeling Rule Cisco ISE 8.3.0
Cisco ISR Modeling Rule Cisco ISR 8.4.0
Cisco Meraki Modeling Rule Cisco Meraki 6.10.0
Cisco Nexus Cisco Nexus 8.2.0
Cisco Security Management Appliance CiscoSMA 6.10.0
Cisco Stealthwatch Modeling Rule Cisco Secure Network Analytics (Stealthwatch) 6.10.0
Cisco ThousandEyes Modeling Rule Cisco ThousandEyes 8.7.0
Cisco UCM Modeling Rule Cisco UCM 8.5.0
Cisco Umbrella Cloud Security Modeling Rule Cisco Umbrella cloud security 8.3.0
Cisco WLC Modeling Rule Cisco Wireless LAN Controller 8.3.0
Cisco Webex Modeling Rule Cisco Webex Teams 8.4.0
CiscoASR Modeling Rule Cisco ASR 8.4.0
CiscoFirepower Modeling Rule Cisco Firepower 6.10.0
Citrix ADC Modeling Rule Citrix ADC 8.4.0
Citrix Cloud Modeling Rule Citrix 8.4.0
Claroty Modeling Rule Claroty 8.3.0
Clearswift DLP Modeling Rules Clearswift DLP 8.2.0
Cloudflare WAF Modeling Rule Cloudflare WAF 8.2.0
Cloudflare Zero Trust Modeling Rule Cloudflare Zero Trust 8.7.0
Code42 Code42 Modeling Rule Code42 8.5.0
Cohesity Helios Modeling Rule Cohesity Helios 8.4.0
Commvault Backup Solutions Modeling Rule Commvault Backup Solutions 8.2.0
Corelight Zeek Modeling Rules Corelight Zeek 6.10.0
CybelAngel Platform Modeling Rule CybelAngel 8.4.0
CyberArk EPM Modeling Rule CyberArk Endpoint Privilege Manager 8.3.0
CyberArk ISP Modeling Rule CyberArk 8.4.0
CyberArk PTA Modeling Rule CyberArk Privileged Threat Analytics 8.2.0
CyberArkEPV Modeling Rule CyberArk PAM Self-Hosted 8.3.0
CyberArkIdentityEventCollector CyberArk Identity 6.10.0
Darktrace Modeling Rule Darktrace 8.2.0
Defender For Cloud Microsoft Modeling Rule Microsoft Defender for Cloud 6.10.0
Delinea ALM Modeling Rule Delinea Account Lifecycle Manager 6.10.0
Delinea Secret Server Delinea Secret Server 6.10.0
Dell EMC Unity Modeling Rule Dell EMC Unity 8.3.0
Digital Guardian ARC Modeling Rule Digital Guardian 8.2.0
Digital Shadows Modeling Rule ReliaQuest Digital Risk Protection 8.4.0
Docusign Docusign Modeling Rule Docusign 8.4.0
Dragos Platform Modeling Rule Dragos Platform 8.5.0
DropboxEventCollector Dropbox 3.3.0
DropboxEventCollector Dropbox 6.10.0
Druva Druva Modeling Rule Druva 8.6.0
Duo 2.0 Modeling Rule DUO Admin 8.4.0
Duo Modeling Rule DUO Admin 6.8.0
Duo Modeling Rule DUO Admin 6.10.0
Endpoint Protection WithSecure Modeling Rule WithSecure 6.10.0
Exabeam Modeling Rule Exabeam Advanced Analytics 8.4.0
ExtraHop RevealX Modeling Rule ExtraHop Reveal(x) 8.4.0
F5 APM Modeling Rule F5 APM 8.3.0
F5 ASM F5 ASM 6.10.0
F5 ASM F5 ASM 6.8.0
F5 BIG-IP Advanced WAF Modeling Rule F5 BIG-IP Advanced WAF 8.4.0
F5LTM Modeling Rule F5 LTM 8.2.0
FireEye HX Modeling Rule FireEye HX 6.8.0
FireEye NX Modeling Rule FireEye Network Security (NX) 6.10.0
FireEye NX Modeling Rule FireEye Network Security (NX) 6.8.0
Forcepoint DLP Modeling Rule Forcepoint DLP 8.2.0
Forcepoint Email Security Modeling Rules Forcepoint Email Security 8.2.0
Forcepoint NGFW Modeling Rule Forcepoint Web Security 6.10.0
Forcepoint Secure Web Gateway Forcepoint Secure Web Gateway 8.2.0
ForeScout CounterACT Modeling Rule ForeScout NAC - CounterACT 8.5.0
Fortimail Modeling Rule Fortimail 8.4.0
Fortinet FortiGate Modeling Rule FortiGate 6.10.0
Fortinet FortiManager Modeling Rule FortiManager 8.4.0
Fortinet Fortiweb Modeling Rule Fortinet Fortiweb 8.4.0
Genesys Cloud Modeling Rule Genesys Cloud 8.4.0
Genetec Security Center Modeling Rule Genetec Security Center 8.4.0
GitGuardian Modeling Rule GitGuardian 8.3.0
Github Modeling Rule GitHub 6.8.0
Github Modeling Rule GitHub 6.10.0
Gitlab Mapping Rules GitLab 6.8.0
Gitlab Mapping Rules GitLab 6.10.0
Google Apigee Edge Modeling Rule Google Apigee Edge 8.8.0
Google Chrome Modeling Rule Google Chrome 8.4.0
Google Cloud Logging Modeling Rule Google Cloud Logging 8.5.0
Google Cloud SCC Modeling Rule Google Cloud SCC 8.4.0
Google Drive Modeling Rule Google Drive 6.10.0
HPE Aruba Central Modeling Rule HPE Aruba Central 8.4.0
HPE Aruba ClearPass Modeling Rule HPE Aruba Clearpass 8.3.0
HPE Switch Modeling Rule HPE Switch 8.5.0
Halcyon Halcyon Modeling Rule Halcyon 8.13.0
HashiCorp Vault Modeling Rule HashiCorp Vault 8.5.0
HelloWorld Modeling Rule HelloWorld 8.4.0
Huawei FW Modeling Rule Huawei FW 8.5.0
Huawei Network Devices Modeling Rule Huawei Network Devices 8.4.0
IBM AIX Modeling Rule IBM AIX 8.3.0
IBM Guardium Modeling Rule IBM Guardium 8.5.0
IBM LDAP Modeling Rule IBM Directory Server for IBM (LDAP) 8.4.0
IBM MaaS360 Security Modeling Rule IBM MaaS360 Security 8.4.0
IBM Security Verify Modeling Rule IBM Security Verify 8.6.0
IBM Storage Scale Modeling Rule IBM Storage Scale 8.4.0
IRONSCALES Modeling Rule Ironscales Event Collector 8.2.0
Illusive Networks Illusive Networks 6.10.0
Illusive Networks Modeling Rule Illusive Networks 6.8.0
Imperva Incapsula Modeling Rule Imperva Incapsula 8.3.0
Imperva WAF Modeling Rule Imperva WAF 6.10.0
Infoblox Blox One Threat Defense Modeling Rule Infoblox Threat Defense with DDI 6.10.0
Infoblox Modeling Rules Infoblox NIOS 6.10.0
Infoblox Modeling Rules Infoblox NIOS 6.8.0
Ivanti Connect Secure Modeling Rules Ivanti Connect Secure 8.2.0
Ivanti VTM Modeling Rule Ivanti Pulse Secure VTM 8.2.0
Jamf Modeling Rule Jamf 6.8.0
JamfProtect Modeling Rule JamfProtect 8.5.0
JiraEventCollector Atlassian Jira 3.3.0
JiraEventCollector Atlassian Jira 6.10.0
Juniper SRX JuniperSRX 6.8.0
Juniper SRX JuniperSRX 6.10.0
Keeper Security Modeling Rule Keeper Security 8.5.0
Kiteworks Modeling Rule Kiteworks 8.4.0
KnowBe4KMSATEventCollector KMSAT 6.8.0
KnowBe4KMSATEventCollector KMSAT 6.10.0
Kubernetes Modeling Rules Kubernetes 8.2.0
LenelS2 NetBox Modeling Rule LenelS2 NetBox 8.4.0
Linux Events Collection Modeling Rule Linux Events Collection 6.8.0
Linux Events Collection Modeling Rule Linux Events Collection 6.10.0
Lookout Mobile Endpoint Security Modeling Rule Lookout Mobile Endpoint Security (MES) 8.11.0
MacOS Modeling Rule MacOS 8.2.0
Macfee Web Gateway Modeling Rule McAfee Web Gateway 8.4.0
Manage Engine Modeling Rule ManageEngine 8.2.0
ManageEngine ADSelfService Plus Modeling Rule ManageEngine ADSelfService Plus 8.3.0
ManageEngine-ADAudit Modeling Rule ManageEngine ADAudit Plus 6.10.0
ManageEngine-ADManager Modeling Rule ManageEngine ADManager Plus 6.10.0
McAfee Database Security Modeling Rule McAfee Database Security 8.3.0
McAfee NSM Modeling Rule McAfee NSM 8.2.0
Mcafee Epo Modeling Rule McAfee ePO 6.8.0
Mcafee Epo Modeling Rule McAfee ePO 8.5.0
Microsoft 365 Defender Event Collector Microsoft Defender for Endpoint 6.8.0
Microsoft 365 Defender Event Collector Modeling Rule Microsoft Defender for Endpoint 6.10.0
Microsoft AD FS Collection Modeling Rule Microsoft AD FS Collection 6.8.0
Microsoft ADFS Collection Microsoft AD FS Collection 8.3.0
Microsoft Advanced Threat Analytics Modeling Rule Microsoft Advanced Threat Analytics 6.10.0
Microsoft DHCP Modeling Rule Microsoft DHCP 8.4.0
Microsoft DNS Modeling Rule Microsoft DNS 8.4.0
Microsoft Defender Cloud Apps Modeling Rule Microsoft Defender for Cloud Apps 6.10.0
Microsoft Defender for Identity Modeling Rule Microsoft Defender for Identity 6.10.0
Microsoft Entra ID Modeling Rule Azure Logs 8.5.0
Microsoft Exchange Server Modeling Rule Microsoft Exchange Server 6.8.0
Microsoft Exchange Server Modeling Rule Microsoft Exchange Server 6.10.0
Microsoft Graph Security Modeling Rules Microsoft Graph Security 8.2.0
Microsoft IIS Web Server Microsoft IIS Web Server 6.8.0
Microsoft IIS Web Server Microsoft IIS Web Server 6.10.0
Microsoft Intune Microsoft Intune 8.2.0
Microsoft NPS Modeling Rule Microsoft NPS 6.10.0
Microsoft NPS Modeling Rule Microsoft NPS 6.8.0
Microsoft System Center Configuration Manager Microsoft Endpoint Configuration Manager 6.10.0
Microsoft System Center Configuration Manager Modeling Rule Microsoft Endpoint Configuration Manager 6.8.0
Microsoft WSUS Modeling Rule MicrosoftWSUS 6.8.0
Microsoft WSUS Modeling Rule MicrosoftWSUS 6.10.0
Microsoft Windows AMSI Security Modeling Rule Microsoft Windows AMSI 8.3.0
Microsoft Windows Sysmon Modeling Rule Microsoft Sysmon 8.4.0
MicrosoftWindowsEvents Microsoft Windows Event Logs 8.2.0
Mimecast Modeling Rule Mimecast 6.10.0
Mimecast Modeling Rule Mimecast 6.8.0
Monday Monday Modeling Rule Monday 8.4.0
MongoDB Atlas Modeling Rule MongoDB Atlas 8.4.0
MySQL Enterprise Modeling Rules MySQL Enterprise 6.10.0
MySQLEnterpriseEventCollector MySQL Enterprise 6.8.0
NGINX Web Server NGINX Web Server 6.10.0
NGINX Web Server NGINX Web Server 6.8.0
NVIDIA DOCA Argus Modeling Rule NVIDIA DOCA Argus 8.4.0
Nasuni File Services Modeling Rule Nasuni File Services 8.5.0
NetBox IRM Modeling Rule NetBox 6.10.0
Netmotion VPN Modeling Rule Netmotion VPN 8.5.0
Netskope Modeling Rule Netskope 6.8.0
Netskope Modeling Rule Netskope 6.10.0
Office 365 Modeling Rule Office 365 8.5.0
Okta 2.0 Modeling Rule Okta 8.4.0
Okta ASA Modeling Rule Okta ASA 8.11.0
Okta Access Gateway Okta Access Gateway 6.10.0
Okta Access Gateway Modeling Rule Okta Access Gateway 6.8.0
Okta Modeling Rule Okta 6.8.0
Okta Modeling Rule Okta 6.10.0
OneLogin Modeling Rule OneLogin 6.10.0
OneLogin Modeling Rule OneLogin 6.8.0
OneModel OneModel (Deprecated) 6.8.0
OneModel OneModel (Deprecated) 6.10.0
OnePassword OnePassword Modeling Rule OnePassword 8.4.0
OpenAI Modeling Rule OpenAI 8.5.0
Oracle OAM Modeling Rule Oracle IAM 8.5.0
OracleCloudInfrastructure Modeling Rule Oracle Cloud Infrastructure (OCI) 6.10.0
OracleDBEventCollector Oracle Database 6.10.0
OracleDBEventCollector Oracle Database 6.8.0
Orca Modeling Rules Orca 6.10.0
Palo Alto Prisma Cloud Modeling Rule Prisma Cloud by Palo Alto Networks 8.2.0
Portnox Modeling Rule Portnox 8.3.0
Prisma Cloud Compute Modeling Rule Prisma Cloud Compute by Palo Alto Networks 8.3.0
Prisma SAAS Security Modeling Rule SaaS Security by Palo Alto Networks 8.4.0
Proofpoint Email Security Modeling Rule Proofpoint Email Security 8.3.0
Proofpoint Isolation Modeling Rule Proofpoint Isolation 8.3.0
Proofpoint ObserveIT Modeling Rule Proofpoint ObserveIT 8.2.0
Proofpoint Threat Response Modeling Rule Proofpoint Threat Response 6.10.0
Proofpoint Threat Response Modeling Rule Proofpoint Threat Response 6.8.0
ProofpointCASB Modeling Rule Proofpoint CASB 8.2.0
ProofpointServerProtection Modeling Rule Proofpoint Protection Server 8.3.0
ProofpointTAP Modeling Rule Proofpoint TAP 6.8.0
ProofpointTAP Modeling Rule Proofpoint TAP 8.3.0
Qualys Modeling Rule Qualys 8.2.0
RSA SecureID Modeling Rule RSA SecurID 8.4.0
Radware Cloud DDoS Protection Services Modeling Rule Radware Cloud DDoS Protection Services 8.11.0
Radware Cloud Services Modeling Rule Radware Cloud WAF Services 8.3.0
Reblaze WAF Modeling Rule Reblaze WAF 8.5.0
Recorded Future Modeling Rule Recorded Future Intelligence 8.2.0
Retarus Secure Email Gateway Modeling Rule Retarus Secure Email Gateway 8.5.0
Riverbed Flow Gateways Modeling Rule Riverbed Flow Gateways 8.9.0
RunZero RunZero Modeling Rule RunZero 6.10.0
SafeNetTrustedAccess Modeling Rule Thales SafeNet Trusted Access 6.10.0
SafeNetTrustedAccess Modeling Rule Thales SafeNet Trusted Access 6.8.0
SailPoint IdentityNow Modeling Rule SailPoint IdentityNow 8.6.0
Salesforce Modeling Rule Salesforce 8.14.0
Salesforce Modeling Rule Salesforce 6.8.0
Salesforce Modeling Rule Salesforce 8.3.0
Saviynt Enterprise Identity Cloud Modeling Rule Saviynt Enterprise Identity Cloud 8.4.0
SecureAuth IdP Modeling Rule SecureAuth Identity Platform 8.4.0
Semperis DSP Modeling Rule Semperis DSP 8.3.0
SentinelOne Modeling Rule SentinelOne 6.10.0
ServiceNow ServiceNow Modeling Rule ServiceNow 8.4.0
Shodan Banner Modeling Rule Shodan 8.6.0
Siemens SiPass Modeling Rule Siemens SiPass 8.4.0
Silverfort Admin Console Modeling Rule Silverfort 8.12.0
Slack Modeling Rule Slack 8.14.0
Slack Modeling Rule Slack 6.8.0
Slack Modeling Rule Slack 6.10.0
SonicWall NSv SonicWall NSv 8.2.0
Squid Modeling Rule Squid 8.4.0
Symantec BlueCoat ProxySG Modeling Rules Symantec BlueCoat ProxySG 6.10.0
Symantec Cloud Secure Web Gateway Modeling Rule Symantec Cloud Secure Web Gateway 8.4.0
Symantec Endpoint Protection Modeling Rule Symantec Endpoint Protection 8.4.0
Symantec Endpoint Security Modeling Rule Symantec Endpoint Security 8.4.0
SymantecCloudSOC Modeling Rule SymantecCloudSOC 6.10.0
SymantecDLP Modeling Rule Symantec Data Loss Prevention 8.4.0
Synopsys Coverity Modeling Rule Synopsys Coverity 8.5.0
Tableau Tableau 6.10.0
Tableau Modeling Rule Tableau 6.8.0
Tanium Modeling Rule Tanium 8.2.0
Tanium Threat Response Modeling Rule Tanium Threat Response 8.4.0
TeamViewer Tensor Modeling Rule TeamViewer 6.10.0
Tenable_io Asset Collection Tenable Vulnerability Management (formerly Tenable.io) 8.5.0
Tenable_io Modeling Rule Tenable Vulnerability Management (formerly Tenable.io) 8.4.0
Thinkst Canary Modeling Rule Thinkst Canary 6.8.0
Thinkst Canary Modeling Rule Thinkst Canary 6.10.0
Tigera Calico Modeling Rule Tigera Calico 8.4.0
Trellix Email Security Cloud Modeling Rule Trellix Email Security - Cloud 6.8.0
Trellix ePO Modeling Rule Trellix_ePO 8.5.0
Trend Micro Email Security Modeling Rule Trend Micro Email Security 6.10.0
Trend Micro TippingPoint Modeling Rule Trend Micro TippingPoint 8.2.0
TrendAI Vision One™ Modeling Rule TrendAI Vision One™ 6.10.0
TrendAI™ Deep Security™ Modeling Rule TrendAI™ Deep Security™ 8.2.0
TrendMicro InterScan Web Security Suite Modeling Rule Trend Micro InterScan Web Security 8.4.0
Ubiquiti Unifi Modeling Rule Ubiquiti Unifi 8.2.0
Unix Auditd Modeling Rule Auditd 6.10.0
VMWare Carbon Black Cloud Modeling Rule Carbon Black Endpoint Standard 8.4.0
VMWare NSX Modeling Rule VMWare NSX 8.4.0
VMware ESXi Modeling Rule VMware ESXi 6.10.0
VMware ESXi Modeling Rule VMware ESXi 8.13.0
VMware Vcenter 2.9 Modeling Rule VMware vCenter 8.13.0
VMware vCenter VMware vCenter 6.8.0
VMware vCenter 1.3 Modeling Rule VMware vCenter 6.10.0
Vectra AI Event Collector Modeling Rule Vectra AI 6.10.0
Watchguard Firebox Private Access Modeling Rule WatchguardFirebox 6.10.0
Workday Modeling Rule Workday 8.3.0
Zero Networks Segment Modeling Rule Zero Networks Segment 8.5.0
Zoom Modeling Rule Zoom 6.10.0
Zscaler Internet Access Modeling Rule Zscaler Internet Access 6.8.0
Zscaler Internet Access Modeling Rule Zscaler Internet Access 8.11.0
Zscaler Private Access Modeling Rule ZscalerZPA 6.8.0
Zscaler Private Access Modeling Rule ZscalerZPA 6.10.0
cyfirma decyfir Modeling Rule DeCYFIR 8.4.0
iManage Threat Modeling Rule iManage Threat Manager 8.4.0
jamf Modeling Rule Jamf 8.4.0