74bf6126fb
feat(efficientip): new EfficientIP SOLIDserver DNS/DDI integration (French vendor)
...
SOLIDserver REST API, 5 commands: add RPZ record (DNS block/sinkhole), list DNS
zones, search IP, list networks. HTTP Basic auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 21:13:22 +02:00
dd574e550b
feat(gatewatcher): new Gatewatcher AionIQ NDR integration (French vendor)
...
Gatewatcher AionIQ, 4 commands: list/get alerts, search alerts. API-KEY auth,
stdlib-only. py_compile clean. NOTE: API paths best-effort — verify against
vendor docs before production.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:12:38 +02:00
8a7e5a33a2
feat(tehtris): new TEHTRIS XDR integration (French vendor)
...
TEHTRIS XDR, 5 commands: list/get alerts, list agents, isolate agent
(containment). Bearer auth, stdlib-only. py_compile clean. NOTE: API paths
best-effort — verify against vendor docs before production.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:12:37 +02:00
3c348b7601
feat(glimps): new GLIMPS Detect malware-analysis integration (French vendor)
...
GDetect API lite v2, 4 commands: submit file (multipart), get result by UUID,
search by SHA-256. Token auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:12:37 +02:00
2475c4b56e
feat(stormshield): new Stormshield SNS firewall integration (French vendor)
...
Stormshield SNS API, 5 commands: add/remove block host-group member (containment),
list hosts, monitor query. Session (login) auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:07:38 +02:00
3be14f2f00
feat(wallix-bastion): new WALLIX Bastion PAM integration (French vendor)
...
WALLIX Bastion REST API, 6 commands: list devices/accounts/authorizations,
list/get sessions. X-Auth-User/X-Auth-Key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:07:38 +02:00
3a4d06441c
feat(crowdsec): new CrowdSec CTI integration (French vendor)
...
CrowdSec CTI API v2, 4 commands: IP reputation, multi-IP search, fire list.
API-key auth, stdlib-only. py_compile clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 16:07:37 +02:00
ce319c2fea
feat(intel471): new Intel 471 threat-intel integration
...
Intel 471 Titan API v1, 5 commands: search reports/indicators, get report,
list CVE reports. HTTP Basic auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:49:17 +02:00
8f3d9607df
feat(threatq): new ThreatQ threat-intel integration
...
ThreatQ REST API, 5 commands: search/get indicators, create indicator, list
events. OAuth2 password-grant auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:49:17 +02:00
a2f2b8efa0
feat(eclecticiq): new EclecticIQ threat-intel integration
...
EclecticIQ Intelligence Center API v2, 4 commands: search entities/observables,
get entity. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:49:16 +02:00
3c282e8e53
feat(signalsciences): new Signal Sciences (Fastly NGWAF) integration
...
Signal Sciences API v0, 5 commands: list sites, get suspicious IPs, list events,
add IP to list (block). API-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:44:30 +02:00
771c90ef0d
feat(imperva): new Imperva Cloud WAF integration
...
Cloud Application Security API v1, 5 commands: list sites, get site status,
block/whitelist IPs (site ACL). API-ID/key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:44:29 +02:00
9fb5b65e4a
feat(f5-bigip): new F5 BIG-IP integration
...
iControl REST, 6 commands: list virtual servers/pools, get pool members,
disable pool member, add data-group record (block). HTTP Basic auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:44:28 +02:00
16fe51ee99
feat(sailpoint): new SailPoint IdentityNow IGA integration
...
IdentityNow API v3, 6 commands: list/get identities, list accounts, disable/
enable account (containment). OAuth2 client-credentials auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:39:19 +02:00
5089e4466d
feat(beyondtrust-password-safe): new BeyondTrust Password Safe PAM integration
...
Password Safe REST API v3, 5 commands: list managed accounts/systems, create
release request, get credential. PS-Auth session auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:39:18 +02:00
8fa1ade945
feat(delinea-secret-server): new Delinea Secret Server PAM integration
...
Secret Server REST API v1, 5 commands: search secrets, get secret, get secret
field, list folders. OAuth2 password-grant auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:39:18 +02:00
54b077bfc9
feat(confluence): new Confluence runbook/knowledge integration
...
Confluence REST API, 6 commands: CQL search, get page, create/update page,
list spaces. Basic (email + API token) auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:23:56 +02:00
6d38896892
feat(dropbox): new Dropbox file/evidence integration
...
Dropbox API v2, 5 commands: search, get metadata, list folder, create shared
link. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:23:56 +02:00
223dfd34e3
feat(box): new Box file/evidence integration
...
Box Content API v2, 6 commands: search, get file/folder info, list folder
items, create shared link. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:23:56 +02:00
83c1736d47
feat(snyk): new Snyk appsec-posture integration
...
Snyk API v1 + REST, 5 commands: list/get projects, list project issues, list
org issues. API-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:18:48 +02:00
bc100eef67
feat(gitlab): new GitLab project-security integration
...
GitLab API v4, 6 commands: list vulnerabilities, list/create issues, get
project, list audit events. Private-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:18:48 +02:00
5f2e946c0a
feat(github): new GitHub code-security integration
...
GitHub REST API, 6 commands: list secret/code/Dependabot scanning alerts,
get repo, create issue. PAT (Bearer) auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:18:47 +02:00
86fdd8483a
feat(pingone): new PingOne identity-containment integration
...
PingOne Platform API, 6 commands: list/get users, enable/disable user, list
populations. OAuth2 client-credentials auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:14:01 +02:00
cd02c26b45
feat(jumpcloud): new JumpCloud identity integration
...
JumpCloud API v1, 6 commands: list/get users, suspend/activate user, list
systems. API-key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:14:01 +02:00
ab68b3ae71
feat(onelogin): new OneLogin identity-containment integration
...
OneLogin API v1/v2, 6 commands: list/get users, lock user, logout user (revoke
sessions), list events. OAuth2 client-credentials auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:14:00 +02:00
046fb79008
feat(datadog): new Datadog observability integration
...
Datadog API v1/v2, 6 commands: search logs, list/get monitors, submit event,
list events. API-key + Application-key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:08:51 +02:00
6548740890
feat(sumologic): new Sumo Logic log-search integration
...
Sumo Logic REST API, 4 commands: search (job create+poll+messages, cookie
session), list/get collectors. Access-key (Basic) auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:08:51 +02:00
16deec38f8
feat(graylog): new Graylog log-search integration
...
Graylog REST API, 5 commands: relative message search, list/get streams, get
message. API-token (Basic) auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:08:50 +02:00
cf950cf6e4
feat(withsecure): new WithSecure Elements endpoint integration
...
WithSecure Elements Connect API, 7 commands: list/get devices, isolate/release
(containment), scan, list incidents. OAuth2 client-credentials auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:04:02 +02:00
1949c98cf7
feat(sophos-central): new Sophos Central endpoint integration
...
Sophos Central Endpoint API, 7 commands: list/get endpoints, isolate/de-isolate
(containment), scan, list alerts. OAuth2 client-credentials + tenant discovery
(whoami), stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:04:02 +02:00
addaeadae5
feat(cisco-secure-endpoint): new Cisco Secure Endpoint (AMP) integration
...
AMP for Endpoints API v1, 7 commands: list/get computers, isolate/stop-isolation
(containment), list events, get trajectory. HTTP Basic auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 15:04:01 +02:00
b137e49be4
feat(yaraify): new YARAify file/YARA-intel integration
...
YARAify (abuse.ch) API v1, 4 commands: lookup hash, get YARA rule, recent
matches. Auth-Key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:58:08 +02:00
c5699dd01a
feat(threatfox): new ThreatFox IOC-intel integration
...
ThreatFox (abuse.ch) API v1, 5 commands: search IOC, recent IOCs, search hash,
tag IOCs. Auth-Key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:58:07 +02:00
015131a2d1
feat(malwarebazaar): new MalwareBazaar sample-intel integration
...
MalwareBazaar (abuse.ch) API v1, 5 commands: sample info by hash, recent
samples, tag info, signature info. Auth-Key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:58:07 +02:00
82ad3a9369
feat(armis): new Armis device-visibility integration
...
Armis API v1, 5 commands: search devices/alerts (AQL), get device, update alert
status. Secret-key token-exchange auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:41:43 +02:00
df8a2c1187
feat(axonius): new Axonius asset-management integration
...
Axonius REST API, 5 commands: list/get devices, device count, list users (AQL
filters). API-key + API-secret auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:41:43 +02:00
088694fdc2
feat(runzero): new runZero asset-inventory integration
...
runZero API v1.0, 6 commands: search/get assets, search services, list sites,
list tasks. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:41:42 +02:00
c1867a62a3
feat(rocketchat): new Rocket.Chat ChatOps integration
...
Rocket.Chat REST API v1, 6 commands: post message, get channel info, list
channels, create channel, get user. X-Auth-Token/X-User-Id auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:22:06 +02:00
c2cc4da675
feat(mattermost): new Mattermost ChatOps integration
...
Mattermost REST API v4, 6 commands: create post, get channel by name, search
posts, create channel, get user. Bearer-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:22:05 +02:00
2b5e7f37b4
feat(discord): new Discord notification/ChatOps integration
...
Discord webhook + bot API, 5 commands: webhook message, bot channel message,
list channel messages, get channel. Webhook + bot-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:22:04 +02:00
d469ed1d8f
feat(urlhaus): new URLhaus malicious-URL intel integration
...
URLhaus (abuse.ch) API v1, 5 commands: URL/host/payload lookup, recent URLs.
Auth-Key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:15:54 +02:00
1ec065e91b
feat(binaryedge): new BinaryEdge exposure-intel integration
...
BinaryEdge API v2, 6 commands: host lookup (current/historical), search, domain
subdomains, data-leak email check, subscription. API-key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:15:54 +02:00
ee58358330
feat(hunter): new Hunter.io email-OSINT integration
...
Hunter.io API v2, 5 commands: domain search, email finder, email verifier,
account. API-key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:15:53 +02:00
5bf679cfe0
feat(symantec-dlp): new Symantec DLP integration
...
Symantec DLP Enforce REST API v2, 5 commands: list/get incidents, get incident
history, update incident (status/severity). OAuth2 password-grant auth,
stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:10:27 +02:00
70c66f7386
feat(forcepoint-dlp): new Forcepoint DLP integration
...
Forcepoint DLP REST API v1, 4 commands: list incidents, get incident, update
incident (status/severity/assignee). Token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:10:26 +02:00
4020e13df9
feat(microsoft-purview): new Microsoft Purview DLP integration
...
DLP alerts via Microsoft Graph Security API, 6 commands: list/get DLP alerts,
update alert (status/assignee/determination), list/get incidents. Azure AD
OAuth2 client-credentials auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 14:10:25 +02:00
2a1eb73115
feat(hibp): new Have I Been Pwned breach-enrichment integration
...
HIBP API v3 + Pwned Passwords, 6 commands: account breaches/pastes, list/get
breach, password pwned check (k-anonymity, password never transmitted).
API-key auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 00:57:25 +02:00
81e39e8148
feat(telegram): new Telegram bot alerting integration
...
Telegram Bot API, 5 commands: send message, send photo, get chat, get updates.
Bot-token auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 00:57:24 +02:00
d06ea406d3
feat(twilio): new Twilio SMS/voice alerting integration
...
Twilio REST API, 5 commands: send SMS, make voice call (TwiML), get/list
messages. HTTP Basic auth, stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 00:57:23 +02:00
fe7dae8bd3
feat(wiz): new Wiz CNAPP integration
...
Wiz GraphQL API, 6 commands: list/get issues, update issue status, list
vulnerabilities, list cloud resources. OAuth2 client-credentials auth,
stdlib-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-12 00:53:02 +02:00
Guillaume BOURGEOIS