f3nris/riposte-marketplace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
93309ac74d5eaa9fc0b5f23295a6aad774f5e028
riposte-marketplace/integrations
T
History
f3nris 93309ac74d feat(sentinelone): count-agents can be scoped to an account 
A multi-tenant console answered one number for the whole estate.
accountIds narrows the count to the accounts asked for, the way
get_threats and get_alerts already do at fetch time.
2026-08-14 23:40:13 +02:00
..
abuseipdb
feat(abuseipdb): new AbuseIPDB enrichment integration
2026-07-11 22:33:03 +02:00
active-directory
feat(active-directory): LDAP directory administration integration
2026-06-26 17:22:22 +02:00
alienvault-otx
feat(alienvault-otx): new AlienVault OTX enrichment integration
2026-07-11 22:33:10 +02:00
anomali-threatstream
feat(anomali-threatstream): new Anomali ThreatStream threat-intel integration
2026-07-12 00:15:11 +02:00
anyrun
feat(anyrun): new ANY.RUN sandbox integration
2026-07-11 22:48:50 +02:00
armis
feat(armis): new Armis device-visibility integration
2026-07-12 14:41:43 +02:00
automox
feat(automox): new Automox patch-management integration
2026-07-12 21:59:06 +02:00
aws
feat(aws): new AWS cloud-containment integration
2026-07-11 23:54:00 +02:00
axonius
feat(axonius): new Axonius asset-management integration
2026-07-12 14:41:43 +02:00
azure-security
feat(azure-security): new Microsoft Azure cloud-containment integration
2026-07-11 23:54:01 +02:00
beyondtrust-password-safe
feat(beyondtrust-password-safe): new BeyondTrust Password Safe PAM integration
2026-07-12 15:39:18 +02:00
binaryedge
feat(binaryedge): new BinaryEdge exposure-intel integration
2026-07-12 14:15:54 +02:00
box
feat(box): new Box file/evidence integration
2026-07-12 15:23:56 +02:00
cape
feat(cape): new CAPE Sandbox integration
2026-07-12 00:42:01 +02:00
carbon-black-cloud
feat(edr): OCSF mappers + ingestion for 6 EDR integrations
2026-07-15 22:37:07 +02:00
censys
feat(censys): new Censys enrichment integration
2026-07-11 22:39:29 +02:00
checkpoint
feat(checkpoint): new Check Point firewall-containment integration
2026-07-12 00:20:41 +02:00
chronicle
feat(chronicle): new Google Chronicle SIEM integration
2026-07-12 00:25:51 +02:00
cisco-fmc
feat(cisco-fmc): new Cisco Firepower Management Center integration
2026-07-12 00:20:41 +02:00
cisco-ise
feat(cisco-ise): new Cisco ISE NAC integration
2026-07-12 21:59:07 +02:00
cisco-secure-endpoint
feat(edr): OCSF mappers + ingestion for 6 EDR integrations
2026-07-15 22:37:07 +02:00
cisco-umbrella-enforcement
feat(cisco-umbrella-enforcement): new Cisco Umbrella Enforcement integration
2026-07-11 23:13:24 +02:00
cloudflare
feat(cloudflare): new Cloudflare edge-containment integration
2026-07-12 00:20:40 +02:00
confluence
feat(confluence): new Confluence runbook/knowledge integration
2026-07-12 15:23:56 +02:00
cortex-xdr
fix(cortex-xdr): say what went wrong when the API answers something other than JSON (v1.2.1)
2026-08-13 14:35:54 +02:00
crowdsec
feat(crowdsec): new CrowdSec CTI integration (French vendor)
2026-07-12 16:07:37 +02:00
crowdstrike
feat(integrations): declare default ingestion (command, mapper, default type)
2026-06-27 10:38:09 +02:00
cuckoo
feat(cuckoo): new Cuckoo Sandbox integration
2026-07-12 00:42:00 +02:00
cybelangel
feat(cybelangel): new CybelAngel attack-surface integration (French vendor)
2026-07-12 21:37:31 +02:00
cyberark-pas
feat(cyberark-pas): new CyberArk PAS privileged-access integration
2026-07-11 23:37:54 +02:00
cybereason
feat(edr): OCSF mappers + ingestion for 6 EDR integrations
2026-07-15 22:37:07 +02:00
darktrace
feat(darktrace): new Darktrace NDR integration
2026-07-12 00:48:00 +02:00
datadog
feat(datadog): new Datadog observability integration
2026-07-12 15:08:51 +02:00
delinea-secret-server
feat(delinea-secret-server): new Delinea Secret Server PAM integration
2026-07-12 15:39:18 +02:00
discord
feat(discord): new Discord notification/ChatOps integration
2026-07-12 14:22:04 +02:00
domaintools
feat(domaintools): new DomainTools DNS-intel integration
2026-07-12 21:59:05 +02:00
dropbox
feat(dropbox): new Dropbox file/evidence integration
2026-07-12 15:23:56 +02:00
duo
feat(duo): new Cisco Duo MFA-containment integration
2026-07-11 23:37:53 +02:00
eclecticiq
feat(eclecticiq): new EclecticIQ threat-intel integration
2026-07-12 15:49:16 +02:00
efficientip
feat(efficientip): new EfficientIP SOLIDserver DNS/DDI integration (French vendor)
2026-07-12 21:13:22 +02:00
elasticsearch
feat(elasticsearch): new Elasticsearch log-search integration
2026-07-12 00:25:50 +02:00
emailrep
feat(emailrep): new EmailRep.io enrichment integration
2026-07-11 22:39:29 +02:00
extrahop
feat(extrahop): new ExtraHop Reveal(x) NDR integration
2026-07-12 00:48:03 +02:00
f5-bigip
feat(f5-bigip): new F5 BIG-IP integration
2026-07-12 15:44:28 +02:00
feed-aws-ipranges
feat(feed): add AWS IP ranges feed connector (allowlist / known infra)
2026-07-13 12:08:48 +02:00
feed-blocklist-de
feat(feed): add Blocklist.de feed connector (fail2ban attacker lists)
2026-07-12 22:59:19 +02:00
feed-botvrij
feat(feed): add Botvrij.eu OSINT feed connector (IOC lists by type)
2026-07-13 12:15:50 +02:00
feed-cins-army
feat(feed): add CINS Army feed connector (CI Army bad-guys list)
2026-07-12 22:59:20 +02:00
feed-cisa-kev
feat(feed): add CISA KEV feed connector (known exploited vulnerabilities)
2026-07-13 12:12:34 +02:00
feed-cloudflare-ips
feat(feed): add Cloudflare IPs feed connector (allowlist / known infra)
2026-07-13 12:08:49 +02:00
feed-csv
feat(feed-csv): new generic CSV threat-intel feed connector
2026-07-12 22:43:16 +02:00
feed-dshield
feat(feed): add DShield block list feed connector (SANS ISC)
2026-07-12 22:59:18 +02:00
feed-emergingthreats
feat(feed): add Emerging Threats feed connector (ET Open reputation lists)
2026-07-12 23:02:11 +02:00
feed-feodotracker
feat(feed): add Feodo Tracker feed connector (abuse.ch C2 IP blocklist)
2026-07-12 22:49:28 +02:00
feed-first-epss
feat(feed): add FIRST EPSS feed connector (exploit-prediction scores)
2026-07-13 12:12:35 +02:00
feed-gcp-ipranges
feat(feed): add GCP IP ranges feed connector (allowlist / known infra)
2026-07-13 12:08:49 +02:00
feed-json
feat(feed): add generic JSON feed connector (configurable field mapping)
2026-07-12 23:02:10 +02:00
feed-nvd
feat(feed): add NVD CVE feed connector (recent CVEs, NVD 2.0 API)
2026-07-13 12:12:34 +02:00
feed-office365
feat(feed): add Microsoft 365 endpoints feed connector (allowlist / known infra)
2026-07-13 12:15:50 +02:00
feed-openphish
feat(feed): add OpenPhish feed connector (community phishing URLs)
2026-07-12 23:02:11 +02:00
feed-plaintext
feat(feed-plaintext): new generic plain-text threat-intel feed connector
2026-07-12 22:43:17 +02:00
feed-rss
feat(feed): add generic RSS/Atom IOC feed connector (URL/IP/hash extraction, defang-aware)
2026-07-13 12:15:49 +02:00
feed-spamhaus-drop
feat(feed): add Spamhaus DROP feed connector (DROP/DROPv6/ASN-DROP)
2026-07-12 22:49:30 +02:00
feed-sslbl
feat(feed): add SSL Blacklist feed connector (abuse.ch C2 IP/fingerprint lists)
2026-07-12 22:56:36 +02:00
feed-taxii2
feat(feed-taxii2): new generic TAXII 2.1 / STIX feed connector
2026-07-12 22:43:17 +02:00
feed-threatfox
feat(feed): add ThreatFox feed connector (abuse.ch IOC export)
2026-07-12 22:56:36 +02:00
feed-tor-exit
feat(feed): add Tor exit nodes feed connector
2026-07-12 22:49:29 +02:00
feed-urlhaus
feat(feed): add URLhaus feed connector (abuse.ch malware URL feed)
2026-07-12 22:56:35 +02:00
forcepoint-dlp
feat(forcepoint-dlp): new Forcepoint DLP integration
2026-07-12 14:10:26 +02:00
fortigate
feat(fortigate): new FortiGate network-containment integration
2026-07-11 23:13:24 +02:00
freshservice
feat(freshservice): new Freshservice ITSM integration
2026-07-12 00:31:45 +02:00
gatewatcher
feat(gatewatcher): new Gatewatcher AionIQ NDR integration (French vendor)
2026-07-12 16:12:38 +02:00
gcp-security
feat(gcp-security): new Google Cloud cloud-containment integration
2026-07-11 23:54:02 +02:00
github
feat(github): new GitHub code-security integration
2026-07-12 15:18:47 +02:00
gitlab
feat(gitlab): new GitLab project-security integration
2026-07-12 15:18:48 +02:00
glimps
feat(glimps): new GLIMPS Detect malware-analysis integration (French vendor)
2026-07-12 16:12:37 +02:00
gmail
feat(gmail): new Gmail integration
2026-07-10 23:18:07 +02:00
gmail-single-user
feat(gmail-single-user): new single-mailbox Gmail integration
2026-07-10 23:29:12 +02:00
google-calendar
feat(google-calendar): new Google Calendar integration
2026-07-10 23:17:50 +02:00
google-drive
feat(google-drive): new Google Drive integration
2026-07-10 23:17:58 +02:00
graylog
feat(graylog): new Graylog log-search integration
2026-07-12 15:08:50 +02:00
greynoise
feat(greynoise): new GreyNoise enrichment integration
2026-07-11 22:33:09 +02:00
harfanglab
feat(harfanglab): split image_name into the process path and the threat name (v1.4.1)
2026-08-06 18:15:44 +02:00
hibp
feat(hibp): new Have I Been Pwned breach-enrichment integration
2026-07-12 00:57:25 +02:00
hunter
feat(hunter): new Hunter.io email-OSINT integration
2026-07-12 14:15:53 +02:00
hybrid-analysis
feat(hybrid-analysis): new Hybrid Analysis (Falcon Sandbox) integration
2026-07-11 22:48:49 +02:00
imperva
feat(imperva): new Imperva Cloud WAF integration
2026-07-12 15:44:29 +02:00
infoblox
feat(infoblox): new Infoblox NIOS DNS-containment integration
2026-07-12 00:37:12 +02:00
intel471
feat(intel471): new Intel 471 threat-intel integration
2026-07-12 15:49:17 +02:00
intezer
feat(intezer): new Intezer enrichment integration
2026-07-11 22:58:15 +02:00
intune
feat(intune): new Microsoft Intune MDM integration
2026-07-12 21:53:59 +02:00
ipinfo
feat(ipinfo): support the Lite API for free/Lite plan tokens (v1.1.0)
2026-08-05 21:01:43 +02:00
ipqualityscore
feat(ipqualityscore): new IPQualityScore enrichment integration
2026-07-11 22:58:17 +02:00
jira
feat(jira): new Atlassian Jira integration
2026-07-11 21:56:52 +02:00
joe-sandbox
feat(joe-sandbox): new Joe Sandbox integration
2026-07-11 22:48:49 +02:00
jumpcloud
feat(jumpcloud): new JumpCloud identity integration
2026-07-12 15:14:01 +02:00
mail-sender
feat(mail-sender): new SMTP mail sender integration
2026-07-10 23:48:23 +02:00
mailinblack
feat(mailinblack): new Mailinblack email-security integration (French vendor)
2026-07-12 21:37:32 +02:00
maltiverse
feat(maltiverse): new Maltiverse enrichment integration
2026-07-11 22:39:29 +02:00
malwarebazaar
feat(malwarebazaar): new MalwareBazaar sample-intel integration
2026-07-12 14:58:07 +02:00
mandiant
feat(mandiant): new Mandiant Advantage threat-intel integration
2026-07-12 00:15:12 +02:00
mattermost
feat(mattermost): new Mattermost ChatOps integration
2026-07-12 14:22:05 +02:00
meraki
feat(meraki): new Cisco Meraki network integration
2026-07-12 21:53:58 +02:00
microsoft-defender-endpoint
feat(microsoft-defender-endpoint): new Defender for Endpoint integration
2026-07-11 22:22:45 +02:00
microsoft-defender-o365
feat(microsoft-defender-o365): new O365 email-remediation integration
2026-07-11 23:46:36 +02:00
microsoft-entra-id
feat(microsoft-entra-id): new Microsoft Entra ID integration
2026-07-11 22:22:46 +02:00
microsoft-graph-files
feat(microsoft-graph-files): O365 file management integration (Graph API)
2026-06-26 18:13:43 +02:00
microsoft-purview
feat(microsoft-purview): new Microsoft Purview DLP integration
2026-07-12 14:10:25 +02:00
microsoft-sentinel
feat(microsoft-sentinel): new Microsoft Sentinel integration
2026-07-11 22:22:46 +02:00
microsoft-teams
feat(microsoft-teams): new Microsoft Teams notification integration
2026-07-11 23:28:25 +02:00
mimecast
feat(mimecast): new Mimecast anti-phishing integration
2026-07-11 23:46:35 +02:00
misp
feat(misp): new MISP threat-intel integration
2026-07-11 22:58:16 +02:00
mock-edr-s1
fix(mock-edr-s1): map the OCSF-shaped incident payload
2026-06-27 16:20:53 +02:00
netskope
feat(netskope): new Netskope SASE/CASB integration
2026-07-12 00:37:10 +02:00
okta
feat(okta): new Okta identity-containment integration
2026-07-11 23:37:52 +02:00
onelogin
feat(onelogin): new OneLogin identity-containment integration
2026-07-12 15:14:00 +02:00
opencti
feat(opencti): new OpenCTI threat-intelligence integration
2026-06-29 23:24:57 +02:00
openldap
feat(openldap): LDAP authentication integration (OpenLDAP / Active Directory)
2026-06-26 17:44:54 +02:00
opsgenie
feat(opsgenie): new Opsgenie alerting integration
2026-07-11 23:28:26 +02:00
ovhcloud
feat(ovhcloud): new OVHcloud integration (French vendor)
2026-07-12 21:13:23 +02:00
pagerduty
feat(pagerduty): new PagerDuty alerting integration
2026-07-11 23:28:26 +02:00
panos
feat(panos): new PAN-OS / Panorama firewall-containment integration
2026-07-11 23:13:35 +02:00
pingone
feat(pingone): new PingOne identity-containment integration
2026-07-12 15:14:01 +02:00
prisma-cloud
feat(prisma-cloud): new Prisma Cloud CSPM integration
2026-07-12 00:53:01 +02:00
proofpoint-tap
feat(proofpoint-tap): new Proofpoint TAP email-threat integration
2026-07-11 23:46:35 +02:00
pulsedive
feat(pulsedive): new Pulsedive enrichment integration
2026-07-11 22:39:28 +02:00
qradar
feat(qradar): new IBM QRadar SIEM integration
2026-07-12 00:25:49 +02:00
qualys
feat(qualys): new Qualys VMDR vulnerability integration
2026-07-11 23:59:38 +02:00
ransomware-live
fix(ransomware-live): keyless — drop optional API key, no auth required
2026-07-15 19:18:49 +02:00
rapid7-insightidr
feat(rapid7-insightidr): InsightIDR integration (19 commands + OCSF ingestion)
2026-06-27 14:00:29 +02:00
rapid7-insightvm
feat(rapid7-insightvm): new Rapid7 InsightVM vulnerability integration
2026-07-11 23:59:39 +02:00
recorded-future
feat(recorded-future): Recorded Future + ASI integrations
2026-06-27 15:19:40 +02:00
recorded-future-asi
feat(recorded-future): Recorded Future + ASI integrations
2026-06-27 15:19:40 +02:00
riposte-sextant
feat(riposte-sextant): list the clients, and the identifier to deposit under (v1.1.0)
2026-08-11 09:04:30 +02:00
rocketchat
feat(rocketchat): new Rocket.Chat ChatOps integration
2026-07-12 14:22:06 +02:00
runzero
feat(runzero): new runZero asset-inventory integration
2026-07-12 14:41:42 +02:00
sailpoint
feat(sailpoint): new SailPoint IdentityNow IGA integration
2026-07-12 15:39:19 +02:00
scaleway
feat(scaleway): new Scaleway cloud integration (French vendor)
2026-07-12 21:37:31 +02:00
securitytrails
feat(securitytrails): new SecurityTrails enrichment integration
2026-07-11 22:48:48 +02:00
sekoia-intelligence-center
feat(sekoia): Sekoia XDR + SEKOIA Intelligence Center integrations
2026-06-27 15:04:22 +02:00
sekoia-xdr
feat(sekoia): Sekoia XDR + SEKOIA Intelligence Center integrations
2026-06-27 15:04:22 +02:00
sentinelone
feat(sentinelone): count-agents can be scoped to an account
2026-08-14 23:40:13 +02:00
sentinelone-sdl
feat: SentinelOne SDL + VirusTotal Hunting integrations
2026-06-27 15:34:42 +02:00
servicenow
feat(servicenow): new ServiceNow ITSM integration
2026-07-10 22:48:50 +02:00
servicenow-cmdb
feat(servicenow-cmdb): new ServiceNow CMDB integration
2026-07-10 22:54:01 +02:00
servicenow-iam
feat(servicenow-iam): new ServiceNow IAM integration
2026-07-10 22:57:57 +02:00
shodan
chore: bump ipinfo/shodan/virustotal to regenerate form-based scripts
2026-06-26 00:18:06 +02:00
signalsciences
feat(signalsciences): new Signal Sciences (Fastly NGWAF) integration
2026-07-12 15:44:30 +02:00
slack
feat(slack): new Slack notification/ChatOps integration
2026-07-11 23:28:25 +02:00
snyk
feat(snyk): new Snyk appsec-posture integration
2026-07-12 15:18:48 +02:00
sophos-central
feat(edr): OCSF mappers + ingestion for 6 EDR integrations
2026-07-15 22:37:07 +02:00
splunk
feat(integrations): declare default ingestion (command, mapper, default type)
2026-06-27 10:38:09 +02:00
stormshield
feat(stormshield): new Stormshield SNS firewall integration (French vendor)
2026-07-12 16:07:38 +02:00
sumologic
feat(sumologic): new Sumo Logic log-search integration
2026-07-12 15:08:51 +02:00
symantec-dlp
feat(symantec-dlp): new Symantec DLP integration
2026-07-12 14:10:27 +02:00
tehtris
feat(tehtris): new TEHTRIS XDR integration (French vendor)
2026-07-12 16:12:37 +02:00
telegram
feat(telegram): new Telegram bot alerting integration
2026-07-12 00:57:24 +02:00
tenable-io
feat(tenable-io): new Tenable Vulnerability Management integration
2026-07-11 23:59:37 +02:00
thehive
feat(thehive): new TheHive case-management integration
2026-07-12 00:31:43 +02:00
thinkst-canary
feat(thinkst-canary): new Thinkst Canary deception integration
2026-07-12 21:53:59 +02:00
threatconnect
feat(threatconnect): new ThreatConnect threat-intel integration
2026-07-12 00:15:10 +02:00
threatfox
feat(threatfox): new ThreatFox IOC-intel integration
2026-07-12 14:58:07 +02:00
threatq
feat(threatq): new ThreatQ threat-intel integration
2026-07-12 15:49:17 +02:00
trend-vision-one
feat(edr): OCSF mappers + ingestion for 6 EDR integrations
2026-07-15 22:37:07 +02:00
triage
feat(triage): new Hatching Triage sandbox integration
2026-07-12 00:42:02 +02:00
twilio
feat(twilio): new Twilio SMS/voice alerting integration
2026-07-12 00:57:23 +02:00
urlhaus
feat(urlhaus): new URLhaus malicious-URL intel integration
2026-07-12 14:15:54 +02:00
urlscan
feat(urlscan): new urlscan.io enrichment integration
2026-07-11 22:33:10 +02:00
vade
feat(vade): new Vade email-security integration (French vendor)
2026-07-12 21:13:24 +02:00
vault
feat(vault): new HashiCorp Vault secrets integration
2026-07-12 00:53:01 +02:00
vectra
feat(vectra): new Vectra AI NDR integration
2026-07-12 00:48:01 +02:00
virustotal
feat(virustotal): complete v3 command coverage (script-based)
2026-06-27 15:53:22 +02:00
virustotal-hunting
feat: SentinelOne SDL + VirusTotal Hunting integrations
2026-06-27 15:34:42 +02:00
vmray
feat(vmray): new VMRay sandbox integration
2026-07-11 22:58:15 +02:00
wallix-bastion
feat(wallix-bastion): new WALLIX Bastion PAM integration (French vendor)
2026-07-12 16:07:38 +02:00
withsecure
feat(edr): OCSF mappers + ingestion for 6 EDR integrations
2026-07-15 22:37:07 +02:00
wiz
feat(wiz): new Wiz CNAPP integration
2026-07-12 00:53:02 +02:00
yaraify
feat(yaraify): new YARAify file/YARA-intel integration
2026-07-12 14:58:08 +02:00
zendesk
feat(zendesk): new Zendesk ticketing integration
2026-07-12 00:31:44 +02:00
zscaler
feat(zscaler): new Zscaler Internet Access containment integration
2026-07-11 23:13:34 +02:00
zscaler-zpa
feat(zscaler-zpa): new Zscaler Private Access integration
2026-07-12 00:37:11 +02:00