Cyber Triage Integrations
Available with the Team versions
Autopsy
Open source digital forensics
Claude Desktop/Code
Desktop AI tools
CrowdStrike Falcon
Endpoint detection and response
IBM QRadar SIEM
Rapidly detect advanced security threats in your network with real-time analytics
IBM QRadar SOAR
Fast, laser-focused incident response with security orchestration and automation
IRIS
Collaborative incident response platform
KAPE
Artifact parser and extractor
Microsoft Defender for Endpoint
Endpoint detection and response
Palo Alto Cortex XSOAR
Comprehensive security operations platform
Polyswarm
Decentralized threat intelligence market powered by the blockchain technology
Recorded Future Triage
Sandboxing suspicious files for behavioral analysis
ReversingLabs
Expose unknown malware through enterprise-class file intelligence and visibility
SentinelOne Singularity
Enterprise EDR that places an agent on hosts for continuous monitoring
Splunk SIEM
SIEM that can be used to generate and triage alerts
Splunk SOAR
Orchestration platform that can be used to automate incident response workflows
Sumo Logic
Real-time SaaS platform to operate and secure your applications at cloud scale.
Swimlane
Enterprise security automation and orchestration platform
The Sleuth Kit
Open source disk forensics tool
Velociraptor
Digital forensic and incident response tool
Volatility
Open source memory forensics tool
Yara
Malware research and detection tool