Supported integrations for ingestion, detection, and response
The Arctic Wolf Managed Detection and Response (MDR) solution supports a wide variety of product integrations for ingesting and parsing logs, identifying security incidents, and taking response actions.
Legend
— Additional add-on license required
— Supported
— Not supported
Glossary
- Ingest
- Arctic Wolf consumes and parses logs from the product.
- Detect
- Arctic Wolf can detect security incidents from the content of the logs.
- Respond
- Arctic Wolf can take response actions through the product based on threat artifacts in logs from any source.
Integrations
|
Vendor |
Integration Name |
Product Type |
Ingest |
Detect |
Respond |
|---|---|---|---|---|---|
|
1Password |
1Password |
Authentication |
|
|
|
|
Abnormal |
Abnormal Cloud Email Security |
|
|
|
|
|
Amazon Web Services |
Amazon Web Services (AWS) |
IaaS |
|
|
|
|
Arctic Wolf |
Arctic Wolf Agent |
Endpoint |
|
|
|
|
Arctic Wolf |
Arctic Wolf Sensor |
Network |
|
|
|
|
Arctic Wolf |
Aurora Endpoint Defense |
Endpoint |
|
|
|
|
Barracuda |
Barracuda CloudGen Firewall |
Network |
|
|
|
|
Box |
Box |
SaaS |
|
|
|
|
Broadcom |
Broadcom Symantec Endpoint Security |
Endpoint |
|
|
|
|
Broadcom |
Carbon Black Cloud |
Endpoint |
|
|
|
|
Broadcom |
VMware ESXi |
Hypervisor |
|
|
|
|
Broadcom |
VMware vCenter |
Hypervisor |
|
|
|
|
Cato |
Cato SSE 360 |
SASE |
|
|
|
|
Check Point |
Check Point Email Security |
|
|
|
|
|
Check Point |
Check Point Quantum |
Network |
|
|
|
|
Cisco |
Cisco Adaptive Security Appliance (ASA) |
Network |
|
|
|
|
Cisco |
Cisco Catalyst Center |
Network |
|
|
|
|
Cisco |
Cisco Duo |
Authentication, identity |
|
|
|
|
Cisco |
Cisco Firepower Threat Defense (FTD) |
Network |
|
|
|
|
Cisco |
Cisco Meraki |
Network |
|
|
|
|
Cisco |
Cisco Meraki Firewall & WAP |
Network |
|
|
|
|
Cisco |
Cisco Secure Email |
|
|
|
|
|
Cisco |
Cisco Secure Endpoint |
Endpoint |
|
|
|
|
Cisco |
Cisco Umbrella |
Network |
|
|
|
|
Citrix |
Citrix NetScaler |
Network |
|
|
|
|
Claroty |
Claroty xDome pour les environnements de santé |
OT/IoT security |
|
|
|
|
Claroty |
Claroty xDome pour les environnements industriels |
OT/IoT security |
|
|
|
|
Cloudflare |
Cloudflare WAF |
WAF |
|
|
|
|
CrowdStrike |
CrowdStrike Falcon Endpoint |
Endpoint |
|
|
|
|
CrowdStrike |
CrowdStrike Falcon Identity Protection |
Authentication, identity |
|
|
|
|
Datadog |
Datadog |
SaaS |
|
|
|
|
Delinea |
Delinea Platform and Delinea Secret Server |
SaaS |
|
|
|
|
Dell |
Dell switch |
Network |
|
|
|
|
Epic |
Epic |
EHR |
|
|
|
|
ESET |
ESET |
Endpoint |
|
|
|
|
ExtraHop |
ExtraHop RevealX 360 |
Network |
|
|
|
|
F5 |
F5 BIG-IP (Advanced WAF) |
Network |
|
|
|
|
Forcepoint |
Forcepoint NGFW |
Network |
|
|
|
|
Fortinet |
FortiEDR |
Endpoint |
|
|
|
|
Fortinet |
Fortinet FortiManager |
Network |
|
|
|
|
|
Google Cloud Platform (GCP) |
IaaS |
|
|
|
|
|
Google Workspace |
SaaS |
|
|
|
|
Idira |
Idira Identity Security Platform (anciennement CyberArk Identity Security Platform) |
SaaS |
|
|
|
|
Idira |
Idira Privilege Cloud (anciennement CyberArk Privilege Cloud) |
SaaS |
|
|
|
|
Idira |
Idira Privileged Access Management (PAM) (anciennement CyberArk PAM) |
PAM |
|
|
|
|
iManage |
iManage Threat Manager |
SaaS |
|
|
|
|
Imprivata |
Imprivata ITDR |
Authentication, identity |
|
|
|
|
Infoblox |
Infoblox |
Network |
|
|
|
|
JumpCloud |
Directory Insights |
Authentication, identity |
|
|
|
|
Juniper |
Juniper NGFW |
Network |
|
|
|
|
Microsoft |
Active Directory |
Authentication, identity |
|
|
|
|
Microsoft |
ADFS |
Authentication, identity |
|
|
|
|
Microsoft |
Microsoft 365 |
Email, SaaS |
|
|
|
|
Microsoft |
Microsoft Azure |
IaaS |
|
|
|
|
Microsoft |
Microsoft Defender AV |
Endpoint |
|
|
|
|
Microsoft |
Microsoft Defender XDR |
SaaS |
|
|
|
|
Microsoft |
Windows Network Policy Server (NPS) |
Network |
|
|
|
|
Mimecast |
Mimecast |
|
|
|
|
|
Netgate |
Netgate pfSense Plus |
Network |
|
|
|
|
Netskope |
Netskope |
SASE |
|
|
|
|
Okta |
Auth0 |
Authentication, identity |
|
|
|
|
Okta |
Okta |
Authentication, identity |
|
|
|
|
One Identity |
OneLogin |
Authentication, identity |
|
|
|
|
Oracle |
Oracle Cloud Guard |
IaaS |
|
|
|
|
Palo Alto Networks |
Cortex XDR |
Endpoint |
|
|
|
|
Palo Alto Networks |
Palo Alto GlobalProtect VPN |
Network |
|
|
|
|
Palo Alto Networks |
Palo Alto Networks Firewall and Panorama |
Network |
|
|
|
|
Palo Alto Networks |
Prisma Access |
SASE |
|
|
|
|
Ping Identity |
PingOne |
Authentication, identity |
|
|
|
|
Proofpoint |
Proofpoint Targeted Attack Protection (TAP) |
|
|
|
|
|
Salesforce |
Salesforce |
SaaS |
|
|
|
|
SentinelOne |
SentinelOne Singularity Endpoint |
Endpoint |
|
|
|
|
SentinelOne |
SentinelOne Singularity Identity |
Authentication, identity |
|
|
|
|
SonicWall |
SonicWall |
Network |
|
|
|
|
Sophos |
Sophos Central |
Endpoint |
|
|
|
|
Sophos |
Sophos XG/XGS |
Network |
|
|
|
|
Tanium |
Tanium Platform |
Endpoint |
|
|
|
|
ThreatDown |
ThreatDown Nebula |
Endpoint |
|
|
|
|
Trellix |
FireEye |
Network |
|
|
|
|
Trellix |
Trellix ePolicy Orchestrator (Trellix ePO) |
Network |
|
|
|
|
Trend Micro |
TrendAI Vision One Email and Collaboration Security |
|
|
|
|
|
Trend Micro |
TrendAI Vision One Endpoint Security |
Endpoint |
|
|
|
|
Trend Micro |
Trend Micro Apex Central |
Network |
|
|
|
|
Ubiquiti |
Ubiquiti UniFi |
Network |
|
|
|
|
Varonis |
Varonis |
Network |
|
|
|
|
WatchGuard |
WatchGuard Firebox |
Network |
|
|
|
|
Webroot |
Webroot |
Endpoint |
|
|
|
|
Wiz |
Wiz Cloud/Defend |
SaaS |
|
|
|
|
Zscaler |
Zscaler Internet Access (ZIA) |
Network |
|
|
|
|
Zscaler |
Zscaler Private Access (ZPA) |
Network |
|
|
|