| Microsoft Entra ID |
_ASim_Authentication_AADManagedIdentitySignInLogs |
Microsoft Entra ID |
| Microsoft Entra ID |
_ASim_Authentication_AADNonInteractiveUserSignInLogs |
Microsoft Entra ID |
| Microsoft Entra ID |
_ASim_Authentication_AADServicePrincipalSignInLogs |
Microsoft Entra ID |
| AWS |
_ASim_Authentication_AWSCloudTrail |
Amazon Web Services |
| Barracuda WAF |
_ASim_Authentication_BarracudaWAF |
Barracuda WAF (legacy connector)
Common Event Format
VirtualMetric DataStream |
| Cisco Adaptive Security Appliance (ASA) |
_ASim_Authentication_CiscoASA |
Common Event Format
VirtualMetric DataStream |
| Cisco DNAC |
_ASim_Authentication_CiscoDNAC |
Syslog |
| Cisco IOS |
_ASim_Authentication_CiscoIOS |
Syslog |
| Cisco ISE |
_ASim_Authentication_CiscoISE |
Syslog |
| Cisco ISE Administrator |
_ASim_Authentication_CiscoISEAdministrator |
Syslog |
| Cisco Meraki |
_ASim_Authentication_CiscoMeraki |
CustomLogsAma |
| Cisco Meraki |
_ASim_Authentication_CiscoMerakiSyslog |
Syslog |
| CrowdStrike Falcon Endpoint Protection |
_ASim_Authentication_CrowdStrikeFalconHost |
Common Event Format
CrowdStrike Falcon Endpoint Protection (legacy connector)
VirtualMetric DataStream |
| Fortigate |
_ASim_Authentication_FortinetFortigate |
Common Event Format
Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel (legacy connector)
VirtualMetric DataStream |
| Google Workspace |
_ASim_Authentication_GoogleWorkspace |
GoogleWorkspaceReports (legacy connector) |
| Illumio |
_ASim_Authentication_IllumioSaaSCore |
IllumioSaaS |
| M365 Defender for EndPoint |
_ASim_Authentication_M365Defender |
|
| Microsoft Defender for IoT |
_ASim_Authentication_MD4IoT |
|
|
_ASim_Authentication_MicrosoftSecurityEvents |
|
| Windows Security Events |
_ASim_Authentication_MicrosoftWindowsEvent |
Microsoft Exchange Security - Exchange On-Premises
Windows Forwarded Events
Windows Security Events |
| Native |
_ASim_Authentication_Native |
SynqlyIntegrationConnector |
| Okta |
_ASim_Authentication_OktaSSO |
Okta Single Sign-On (legacy connector) |
| Okta |
_ASim_Authentication_OktaSystemLogs |
|
| Okta |
_ASim_Authentication_OktaV2 |
Okta Single Sign-On |
| Palo Alto Cortex Data Lake |
_ASim_Authentication_PaloAltoCortexDataLake |
Common Event Format
PaloAltoCDL (legacy connector)
VirtualMetric DataStream |
| Palo Alto PAN-OS GlobalProtect |
_ASim_Authentication_PaloAltoGlobalProtect |
Common Event Format
VirtualMetric DataStream |
| Palo Alto PAN-OS |
_ASim_Authentication_PaloAltoPanOS |
Common Event Format
VirtualMetric DataStream |
| PostgreSQL |
_ASim_Authentication_PostgreSQL |
CustomLogsAma
PostgreSQL (legacy connector) |
| Salesforce Service Cloud |
_ASim_Authentication_SalesforceSC |
Salesforce Service Cloud (legacy connector) |
| SentinelOne |
_ASim_Authentication_SentinelOne |
SentinelOne (legacy connector) |
| Microsoft Entra ID |
_ASim_Authentication_SigninLogs |
Microsoft Entra ID |
| OpenSSH |
_ASim_Authentication_Sshd |
Syslog |
| su |
_ASim_Authentication_Su |
Syslog |
| sudo |
_ASim_Authentication_Sudo |
Syslog |
| VMware Carbon Black Cloud |
_ASim_Authentication_VMwareCarbonBlackCloud |
VMware Carbon Black Cloud (legacy connector) |
| VMware ESXi |
_ASim_Authentication_VMwareESXi |
Cisco SD-WAN
Cisco UCS (legacy connector)
Citrix ADC (legacy connector)
Forescout (Legacy)
RSA SecurID (legacy connector)
Watchguard Firebox (legacy connector) |
| VMware vCenter |
_ASim_Authentication_VMwareVCenter |
CustomLogsAma
VMware vCenter (legacy connector) |
| Vectra |
_ASim_Authentication_VectraXDRAudit |
Vectra XDR |
Authentication ASIM parser