Data Sheet Exabeam Security Management Platform Integrations Inbound Data Sources for Log Ingestion and Service Integrations for Incident Response The more data sources you have in your security and enriches them with contextual information to incident and event management (SIEM), the better provide security analysts with the information they equipped you are to detect attacks. And the more need to detect and investigate incidents. incident response (SOAR) connections you have between your SIEM and your IT and security systems Behavioral Analytics Extended to the Cloud the quicker you can respond. Exabeam Cloud Connectors are pre-built connectors Exabeam Security Management Platform (SMP) has that enable security teams to easily collect logs from over 500 integrations with IT and security products to over 40 popular cloud services such as AWS, GitHub, help your analysts work smarter –providing myriad of Google, Microsoft, Salesforce and others. They allow inbound of data sources from many vendors including enterprises to detect threats using behavior analytics cloud applications; and response integrations in their cloud applications. They also extend any with 3rd party vendors to help you automate and compliance-based security requirements to orchestrate your security response. the cloud. Extensive Data Sources Centralized Security Automation and Orchestration with 3rd Party Integrations Exabeam ingests data from over 500 different IT and security products to provide security analysts Exabeam Incident Responder integrates with with the full scope of events. Exabeam Data Lake, approximately 85 third party IT and security products. Exabeam Advanced Analytics and Exabeam Entity These integrations help your analysts to gather Analytics ingest logs from various sources, including evidence and attach them as artifacts to incidents or VPN, endpoint, network, web, database, CASB, and quarantine affected users and assets until incidents cloud solutions. are mitigated. After ingesting the raw logs, Exabeam then parses Data Sheet Exabeam Security Management Platform Integrations Inbound Data Sources for Log Ingestion List of Integrations as of February 2021 Ś Authentication and Access Management Ś IoT/OT Security Ś Applications Security and Monitoring Ś Network Access, Analysis and Monitoring Ś Cloud Access Security Broker (CASB) Ś Physical Access and Monitoring Ś Cloud Security and Infrastructure Ś Privileged Access Management (PAM) Ś Data Loss Prevention (DLP) Ś Security Analytics Ś Database Activity Monitoring (DAM) Ś Security Information and Event Management (SIEM) Ś Email Security and Management Ś Threat Intelligence Platform Ś Endpoint Security (EPP/EDR) Ś Utilities/Others Ś Firewalls Ś VPN Servers Ś Forensics and Malware Analysis Ś Vulnerability Management (VM) Ś Information Technology Service Management (ITSM) Ś Web Security and Monitoring Type of Log Data Sources Authentication and Ś Adaxes Ś NetIQ Access Management Ś Brivo Ś Novell eDirectory Ś Centrify Ś Okta Ś Cisco Identity Service Engine (ISE) Ś OneLogin Ś Dell EMC RSA Authentication Ś OneSpan Ś Manager Ś OpenDJ LDAP Ś Dell Quest TPAM Ś Oracle Access Manager Ś Dell RSA Authentication Manager Ś Ping Identity Ś Duo Security (Cisco) Ś Sailpoint IdentityNow Ś Entrust IdentityGuard Ś Sailpoint SecurityIQ Ś Fortinet FortiAuthenticator Ś Secure Computing Ś Gemalto MFA Ś Secure Envoy Ś HelpSystems BoKs Ś SecureAuth Ś IBM Lotus Mobile Connect Ś Shibboleth IDP Ś IBM RACF Ś SiteMinder Ś ManageEngine ADManager Ś Specops Ś Microsoft Active Directory Ś StealthBits Ś Microsoft Azure AD Ś SunOne LDAP Ś Microsoft Azure MFA Ś Symantec VIP Ś Namespace rDirectory Ś VMWare Horizon Application Security Ś Atlassian BitBucket Ś Microsoft OneDrive and Monitoring Ś Citrix ShareFile Ś Onapsis Ś Citrix XenApp Ś PowerSentry Ś GitHub Ś Silverfort Ś Google Drive Ś Swivel Ś Juniper OWA Ś VMware VCenter Ś LEAP Ś Zlock Ś Microsoft AppLocker Cloud Access Security Ś Bitglass Ś Microsoft CAS Broker (CASB) Ś Forcepoint CASB Ś Netskope Ś Imperva Skyfence Ś Palo Alto Networks Prisma SaaS (Aperture) Ś McAfee SkyHigh Security Cloud Ś Symantec CloudSOC exabeam.com 02 Data Sheet Exabeam Security Management Platform Integrations Type of Log Data Sources Cloud Security Ś AWS CloudTrail Ś NetApp and Infrastructure Ś AWS CloudWatch Ś Palo Alto Networks Prisma Ś AWS GuardDuty Ś Pulse Secure Ś AWS Inspector Ś Qualys Ś AWS RedShift Ś Salesforce Sales Cloud Ś AWS Shield Ś SAP Ś Box Ś SkyFormation (Exabeam) Ś Citrix ShareFile Ś Symantec Data Center Security (DCS) Ś Dropbox Business Ś Thales Vormetric Ś Google Cloud Platform (GCP) Ś Verdasys Digital Ś Google G-Suite Ś WorkDay Ś Guardian Ś Xceedium Ś Kemp Ś Zoom Ś Microsoft Azure Ś ZScaler Web Security Data Loss Ś Accellion Kiteworks Ś Nasuni Prevention (DLP) Ś Cisco CloudLock Ś Palo Alto Networks Aperture Ś Code42 Incydr Ś Pharos Ś Codegreen Ś Postfix Ś Digital Guardian Ś Ricoh Ś Forcepoint Ś RSA DLP Ś Forcepoint DLP Ś Safend Data Protection Suite Ś Fortinet UTM Ś Skysea Ś GTB GTBInspector Ś Symantec Brightmail Ś HP SafeCom Ś Symantec Data Loss Protection Ś iManage Ś Trap-X Ś Imperva Counterbreach Ś Trend Micro OfficeScan Ś IMSS Ś Tripwire Enterprise Ś InfoWatch Ś Varonis Data Security Platform Ś Kaspersky Enterprise Security Ś Websense DLP Ś Lexmark Ś xsuite Ś Lumension Ś Zscaler NSS Ś McAfee Advanced Threat Defense Database Activity Ś IBM Guardium Ś MySQL Monitoring (DAM) Ś IBM Infosphere Guardium Ś Netwrix Auditor Ś Imperva SecureSphere Ś Oracle DB Ś jSonar SonarG Ś PostgreSQL Ś MariaDB Ś Ranger Audit Ś McAfee MDAM Ś Snowflake Ś Microsoft SQL Server Ś Sybase Email Security Ś Cisco Ironport ESA Ś Postfix and Management Ś Clearswift SEG Ś Proofpoint Email Protection Ś Codegreen Ś Symantec Email Security Ś FireEye Email Threat Prevention (ETP) Ś Symantec Messaging Gateway Ś Microsoft Exchange Ś Trend Micro Email Inspector Ś Microsoft 365 Ś Trend Micro IMSVA Ś Mimecast Email Security Ś Websense ESG exabeam.com 03 Data Sheet Exabeam Security Management Platform Integrations Type of Log Data Sources Endpoint Security (EPP/EDR) Ś AppSense Application Manager Ś Contrast Security Ś Avecto Defendpoint Ś Crowdstrike Falcon Ś Bit9 Ś Cybereason Ś Bromium Advanced Endpoint Security Ś Cylance Ś BusinessObject Ś Defendpoint Ś CarbonBlack (VMWare) Ś Dtex Systems Ś Cisco AMP for Endpoints Ś Elastic Endgame EDR Ś Cisco Threat Grid Ś Ensilo Endpoint Security Ś ESET Endpoint Security Ś MobileIron EMM (EPP/EDR) - CON’T Ś F-Secure Ś ProtectWise Ś Fidelis XPS Ś Red Canary Ś FireEye Endpoint Security (Helix) Ś RSA ECAT Ś Forcepoint Ś Safend Ś Fortigate Ś Secureworks Ś IBM Endpoint Manager Ś SentinelOne Ś Invincea Ś SkySea ClientView Ś Kaspersky Ś Sophos Ś MalwareBytes Ś Symantec EndPoint Protection Ś McAfee EPO Ś Tanium Ś McAfee MVISION Ś Trend Micro Apex One Ś Microsoft Forefront/SCEP Ś VMWare CB Defense Ś Microsoft Windows Native Logs Ś Ziften Firewalls Ś Airlock Web Application Firewall Ś Palo Alto Networks Firewall Ś CheckPoint Firewall Ś pfSense Ś Cisco FirePower Ś Sangfor NGAF Ś Forcepoint NGFW Ś Sophos Firewall Ś Fortinet Enterprise Firewall Ś Zscaler Cloud Firewall Ś Huawei Enterprise Network Firewall Forensics and Ś Attivo BotSink Ś IXIA ThreatArmor Malware Analysis Ś CenturyLink Adaptive Threat Intelligence Ś Symantec Advanced Threat Protection Ś FireEye IPS Ś Wazuh Information Technology Ś ServiceNow Service Management (ITSM) IoT/OT Security Ś Armis Ś Nozomi Networks exabeam.com 04 Data Sheet Exabeam Security Management Platform Integrations Type of Log Data Sources Network Access, Analysis Ś AlgoSec Analyzer Ś Infoblox and Monitoring Ś Arbor Ś Lastline Ś Aruba Networks Ś LogMeIn RemotelyAnywhere Ś Attivo Networks Ś McAfee IDPS Ś AWS Bastion Ś Microsoft NPS Ś BCN Ś Morphisec Nokia VitalQIP Ś BlueCat Networks Adonis Ś Ordr SCE Ś CatoNetworks Ś Palo Alto Networks WildFire Ś Cisco Meraki Ś Quest InTrust Ś Cisco Systems Ś Radius Ś Comware Ś RSA Ś Cyphort Ś Ruckus Ś Darktrace Ś Snort Ś ExtraHop Reveal(x) Ś StealthWatch (Cisco) Ś Extreme Networks Ś Symantec Damballa Failsafe Ś F5 Application Security Manager Ś Synology NAS Ś Failsafe Ś Tipping Point Ś FireEye Network Security (NX) Ś TrapX Ś ForeScout Ś Trend Micro TippingPoint NGIPS Ś Forescout CounterACT Ś Tufin SecureTrack Ś Fortinet Enterprise Firewall Ś Vectra Networks Ś Google Virtual Private Cloud (VPC) Ś Websense Secure Gateway Ś IBM Proventia Network IPS Ś Zeek Network Security Monitor (Corelight) Ś IBM QRadar Network Security Ś Zscaler Internet Access (ZIA) Ś Illumio Physical Access Ś AccessIT Ś Lyrix and Monitoring Ś AMAG Badge Ś OnGuard Ś APC Ś Paxton NET2DOOR Ś Badgepoint Ś PicturePerfect Ś CCURE Ś ProWatch Ś DataWatch Systems Ś RedCloud Ś Galaxy Ś RightCrowd Ś Gallagher Badge Access Ś RS2 Technologies Ś Genetec Ś Sensormatik Ś Honeywell Pro-Watch Ś Siemens Ś ICPAM Ś Swipes Ś Johnson Controls P2000 Ś TimeLox Ś KABA EXOS Ś Vanderbilt Ś Lenel Privileged Access Ś BeyondTrust Ś Password Manager Pro Management (PAM) Ś CyberArk Ś Securelink Ś Lieberman Enterprise Password Ś Thycotic Ś Manager Ś Vanderbilt Ś Liebsoft Ś Viscount (Identiv) Ś MasterSAM Ś Visma Megaflex Ś Osirium Ś VMWare ID Manager (VIDM) exabeam.com 05 Data Sheet Exabeam Security Management Platform Integrations Type of Log Data Sources Security Analytics Ś Alert Logic Ś Microsoft Graph Ś FireEye Endpoint Security (Helix) Ś ObserveIT (Proofpoint) Ś Malwarebytes Ś Palo Alto Networks Cortex XDR Ś Microsoft Advanced Threat Ś Splunk Stream Ś Analytics (ATA) Ś Suricata IDS Security Information and Ś ArcSight (Micro Focus) Ś McAfee ESM Event Management (SIEM) Ś Exabeam