Endpoint Management
The Endpoint Management category of the Application Catalog holds 20 application templates. Choosing Endpoint Management in the catalog's category drop-down shows only these:
| Template | Card description | Template ID |
|---|---|---|
| Acronis Cyber Protect Cloud | Acronis Cyber Protect Cloud alerts, activities and EDR incidents via API w/ Resources | AcronisCP |
| Bitdefender EventPush | Event Push from Bitdefender GravityZone via Splunk-compatible HEC | BitdefenderEP |
| Bitdefender SecurityTelemetry HEC | Security Telemetry from Bitdefender GravityZone via Splunk-compatible HEC | BitdefenderST |
| Coro via HEC | Data input from Coro Cybersecurity via Splunk-compatible HEC | CoroHEC |
| CrowdStrike Falcon | CrowdStrike Falcon XDR incidents w/ Resources | Falcon |
| FalconResource | Falcon Resource Sync (legacy add-on) | FalconResource |
| HEC Input Passthrough | HEC input and pass it through into the datalake | HecPassthrough |
| Horizon3.ai NodeZero | Horizon3.ai NodeZero pentest results (pentests, weaknesses, hosts, action logs) and Tripwires alerts via API | Horizon3 |
| LDAP Connector | Local LDAP Connector | LDAP |
| Manage Engine | Manage Engine events via Syslog | ManageEngine |
| Microsoft Defender | Microsoft Defender XDR Incidents via Entra Application | MSDefender |
| Microsoft Defender Legacy | Microsoft Defender XDR Incidents via Entra Application | DefenderATPLegacy |
| PaloAlto Cortex XDR | PaloAlto Cortex XDR integration | CortexXDR |
| Qualys | Qualys | Qualys |
| SentinelOne API Integration | SentinelOne EDR Activity / Theats / Alerts and Resource Dump | SentinelOne |
| Sophos EDR | Sophos EDR via Sophos Central (API Integration) | SophosEDR |
| Symantec EPM Syslog | Symantec EPM Server (on-prem) via Syslog | SymantecEPMS |
| TrendMicro VisionOne | TrendMicro VisionOne via API Integration | TrendMicroVisionOne |
| Windows Server w/ NXLog | Windows Server events via NXLog / Syslog | WindowsSrvNxLog |
| Zsaler NSS | Zsaler event import via HEC | Zscaler |