About Integrations

• Expel Integrations
• About MDR for Email
• About SIEM Integrations and Connections
• MDR SIEM Tiers
• Webhook Model Reference
• Webhooks Setup for Workbench
See all 7 articles

A-C Integrations

• Abnormal AI Setup for Workbench
• Akamai Guardicore Segmentation (formerly Guardicore Centra) Setup for Workbench
• Arista NDR (via Webhook) Setup for Workbench
• Aurora Endpoint Security (formerly Cylance PROTECT AV) Setup for Workbench
• Box Setup for Workbench
• Corelight Open NDR (via Collector) Setup for Workbench
See all 8 articles

• Amazon/AWS
  • Amazon Elastic Kubernetes Service Setup for Workbench
  • AWS GuardDuty Setup for Workbench
• Broadcom
  • Broadcom Symantec Endpoint Protection (via SIEM) Setup for Workbench
  • Broadcom Carbon Black Cloud (formerly CB ThreatHunter and CB Defense) Setup for Workbench
  • Broadcom Carbon Black EDR (formerly CB Response) Setup for Workbench
• Cisco
  • Cisco ASA (via SIEM) Setup for Workbench
  • Cisco ASA (via Syslog) Setup for Workbench
  • Cisco Duo Setup for Workbench
  • Cisco FirePower (via SIEM) Setup for Workbench
  • Cisco Meraki Setup for Workbench
  See all 8 articles
• Check Point
  • Check Point AV, Anti-Bot, and IPS (via SIEM) Setup for Workbench
  • Check Point Quantum Network Security Setup for Workbench
• Cloudflare
  • Cloudflare WAF Setup for Workbench
  • Cloudflare Zero Trust Network Access (via Webhook) Setup for Workbench
• CrowdStrike
  • CrowdStrike Falcon Next-Gen SIEM Setup for Workbench
  • CrowdStrike Falcon Insight XDR Setup for Workbench
  • CrowdStrike LogScale Setup for Workbench
• CyberArk
  • CyberArk Identity Setup for Workbench
  • CyberArk Privileged Access Management (PAM) (via SIEM) Setup for Workbench

D-J Integrations

• Darktrace Setup for Workbench
• Datadog Observability & Analytics Platform Setup for Workbench
• Devo Setup for Workbench
• Dropbox Setup for Workbench
• Elastic Elasticsearch Setup for Workbench
• Fastly Next-Gen WAF (Formerly Signal Sciences WAF) Setup for Workbench
See all 9 articles

• Exabeam
  • Exabeam Fusion New-Scale SIEM Collector Setup for Workbench
  • Exabeam Fusion SIEM Setup for Workbench
  • Exabeam Fusion XDR Setup for Workbench
  • Exabeam Threat Center Setup for Workbench
• ExtraHop
  • ExtraHop Reveal(x) 360 Setup for Workbench
  • ExtraHop Reveal(x) Enterprise Setup for Workbench
• Fortinet
  • Fortinet FortiAnalyzer Setup for Workbench
  • Fortinet FortiGate (via SIEM) Setup for Workbench
  • Fortinet FortiCNAPP (formerly Lacework) Setup for Workbench
• GitHub
  • GitHub Cloud Setup for Workbench
  • GitHub Self-Hosted (On-Prem) Setup for Workbench
• Google
  • Google Cloud Platform Setup for Workbench
  • Google Cloud Platform Setup for Workbench Appendix
  • Google Kubernetes Engine Setup for Workbench
  • Google Security Operations (SecOps) Setup for Workbench
  • Google Workspace Alert Center Setup for Workbench
  See all 6 articles

L-P Integrations

• Mimecast Advanced Email Security Setup for Workbench
• LastPass Setup for Workbench
• Logz.io Setup for Workbench
• Netskope CASB and Next Gen SWG Setup for Workbench
• Okta Auth0 Setup for Workbench
• Okta Workforce Identity Setup for Workbench
See all 11 articles

• Oracle Cloud Infrastructure
  • Get Started with Oracle Cloud Infrastructure Setup for Workbench
  • Oracle Cloud Infrastructure - Manual Setup (Small Environments)
  • Oracle Cloud Setup - Manual (Large/Enterprise Environments)
  • Oracle Cloud Infrastructure - Terraform Setup
• Microsoft
  • Microsoft 365 Setup for Workbench
  • Microsoft Azure Kubernetes Service Setup for Workbench
  • Microsoft Azure Log Analytics Setup for Workbench
  • Microsoft Azure Setup for Workbench
  • Microsoft Defender for Cloud Apps Setup for Workbench
  See all 11 articles
• Proofpoint
  • Proofpoint Insider Threat Management (via SIEM) Setup for Workbench
  • Proofpoint TAP for MDR Setup for Workbench
• Palo Alto
  • Palo Alto Networks Cortex XDR Pro Setup for Workbench
  • Palo Alto Networks Cortex XSIAM Setup for Workbench
  • Palo Alto Networks Next Gen Firewall Setup for Workbench
  • Palo Alto Networks Prisma Cloud Compute (formerly Twistlock) Setup for Workbench
  • Palo Alto Networks SaaS Security (Formerly Prisma SaaS) Setup for Workbench
  See all 7 articles

Q-Z Integrations

• QRadar Setup for Workbench
• Salesforce Setup for Workbench
• Securonix Next-Gen SIEM Setup for Workbench
• Slack® Setup for Workbench
• Snowflake Setup for Workbench
• Sublime Security Setup for Workbench
See all 13 articles

• SentinelOne
  • SentinelOne Singularity Data Lake Setup for Workbench
  • SentinelOne Singularity Endpoint Setup for Workbench
  • SentinelOne Singularity Hologram (formerly Attivo) (via SIEM) Setup for Workbench
• Splunk
  • Splunk Collector Setup for Workbench
  • Splunk Core Alerts (via Collector) Setup for Workbench
  • Splunk Setup for Workbench
• Sumo Logic
  • About Sumo Logic Integrations
  • Considerations for Sumo Logic Flex Pricing Customers
  • Sumo Logic Cloud Infrastructure Security Setup for Workbench
  • Sumo Logic Cloud SIEM Enterprise Setup for Workbench
  • Sumo Logic SIEM/Data Lake
• Tanium
  • Tanium XEM Core (On-Prem) Setup for Workbench
  • Tanium XEM Core Setup for Workbench
• Thales Imperva
  • Thales Imperva Cloud Web Application Firewall (formerly Imperva Cloud) Setup for Workbench
  • Thales Imperva Web Application Firewall (formerly Imperva SecureSphere) Setup for Workbench
• Zscaler
  • Zscaler Internet Access (ZIA) (via SIEM) Setup for Workbench
  • Zscaler Internet Access (ZIA) (via Webhook) Setup for Workbench

Expel Assembler

• Add a New Assembler
• About the Expel Assembler
• Deploy the Assembler in AWS
• Deploy the Assembler in AWS (Terraform)
• Deploy the Assembler in GCP
• Deploy the Assembler in GCP (Terraform)
See all 11 articles

Security Devices

• Manage Security Devices
• Security Device Health

Creating Test Alerts

• Create Test Alerts for Cloud Integrations
• Create Test Alerts for Google Cloud Platform
• Create Test Alerts for Azure