Exabeam Data Sources

June 15, 2026 ยท View on GitHub

This table lists the out-of-the-box supported Data Sources. This list is auto-generated by Vendor/Product fields.

VendorProduct

1password1password
Abnormal SecurityAbnormal Security
AbsoluteAbsolute DDS
AccellionKiteworks
AdaxesAdaxes
Admin By RequestAdmin By Request
AdobeAdobe Experience Manager
AIM SecurityAI Security
AirlockAirlock Allowlisting
AkamaiAkamai Guardicore
Akamai SIEM
Cloud Akamai
AlgoSecAlgoSec Firewall Analyzer
AmazonAmazon EKS
Amazon Inspector
Amazon Q
Amazon RDS
Amazon Route 53
Amazon S3
AWS Bastion
AWS CloudTrail
AWS CloudWatch
AWS Elastic Load Balancer
AWS GuardDuty
AWS Network Firewall
AWS Redshift
AWS Security Hub
AWS Simple Email Service
AWS SSM
AWS WAF
VPC Flow Logs
ApacheApache
Apache Guacamole
Apache Subversion
Apache Tomcat
APCAPC
ApplemacOS
AppSenseAppSense Application Manager
ArborArbor Cloud
Arctic WolfCylance PROTECT
ArmisArmis Platform
ArmorbloxArmorblox
AssetViewAssetView
AtlassianAtlassian
Atlassian BitBucket
Atlassian Guard
AttivoBOTsink
Auth0Auth0
AvayaAvaya Ethernet Routing Switch
BadgeBadge
BarracudaBarracuda Cloudgen Firewall
Barracuda Email Security Gateway
Barracuda WAF
BeyondTrustBeyondInsight
BeyondTrust
BeyondTrust Privileged Identity
BeyondTrust Remote Support
BeyondTrust Secure Remote Access
BitdefenderGravityZone
BitglassBitglass CASB
BlackBerryBlackBerry Protect
BlueCat NetworksBlueCat Networks
BoxBox Cloud Content Management
Box Shield
CA TechnologiesCA Privileged Access Manager Server Control
CanonimageRUNNER ADVANCE
CatoNetworksCato Cloud
CDSCDS
Check PointCheck Point Anti-Malware
Check Point Avanan
Check Point Endpoint Security
Check Point Identity Awareness
Check Point NGFW
Check Point Security Gateway
Check Point Threat Emulation
Harmony Email & Collaboration
Harmony SaaS
SmartDefense
CheckmarxCheckmarx
CimcorCimTrak
CiscoCisco
Cisco Adaptive Security Appliance
Cisco Cloud Security
Cisco Collaboration
Cisco Cyber Vision
Cisco Data Center
Cisco Email Security
Cisco Identity and Access Management
Cisco Identity Intelligence
Cisco IOS
Cisco ISE
Cisco Network Infrastructure and Management
Cisco Network Monitoring and Analytics
Cisco Network Security
Cisco Remote Access Security
Cisco Secure Endpoint
Cisco Secure Firewall Management Center
Cisco Secure Network Analytics
Cisco Web Security
Cisco Wireless Networking
Duo Access
CitrixCitrix Gateway
Citrix Secure Private Access
Citrix Security Analytics
Citrix Virtual Apps
Citrix Web App Firewall
ClarotyClaroty
CTD
Click StudiosPasswordstate
CloudflareCloudflare Audit
Cloudflare Insights
Cloudflare WAF
CohesityCohesity DataPlatform
CommvaultCommvault
Commvault ThreatWise
CorelightCorelight IDS
CriblCribl
CrowdStrikeFalcon
Identity Threat Detection & Response
CrushFTPCrushFTP
CyberArkCyberArk Privilege Access Manager
CybereasonCybereason
CyberhavenCyberhaven DLP
CyeraOmni DLP
CylanceCylance OPTICS
CynetCynet EDR
DarktraceDarktrace
DataWatch SystemsDataWatch
DelineaCentrify Audit and Monitoring Service
Centrify Authentication Service
Centrify Infrastructure Services
Centrify Zero Trust Privilege Services
Delinea Platform
Secret Server
DellEMC Isilon
PowerMax
PowerProtect
PowerProtect Data Manager
PowerStore
Sonicwall
Digital ArtsDigital Arts i-FILTER for Business
Digital GuardianDigital Guardian Endpoint Protection
Digital Guardian Network DLP
DnsmasqDnsmasq
DragosDragos Platform
DropboxDropbox
Dtex SystemsDTEX InTERCEPT
EgnyteEgnyte
EntrustEntrust Identity Enterprise
EpicEpic SIEM
ErmesErmes Browser Security Platform
ESETESET Endpoint Security
ExabeamABA Telemetry
Advanced Analytics
Audit Log
Correlation Rule
NG Analytics
Phishing Detection
Search
ExtrahopExtrahop Reveal(x)
Extreme NetworksEXOS
Platform ONE
Universal ZTNA
Zebra WLAN Management
F-SecureF-Secure Client Security
F-Secure Policy Manager
F5BIG-IP F5 LBR
F5 Access Policy Manager
F5 Advanced Firewall Manager
F5 Advanced Web Application Firewall
F5 Application Security Manager
F5 BIG-IP
F5 BIG-IP DNS
F5 Distributed Cloud
F5 Silverline
F5 WebSafe
NGINX
FastlyNext-Gen Web Application Firewall
FireMonFireMon
ForcepointForcepoint DLP
Forcepoint Email Security
Forcepoint Next-Gen Firewall
Websense Security Gateway
ForescoutForescout CounterACT
FortinetFortiAuthenticator
FortiClient
FortiGate
FortiNAC
Fortinet Enterprise Firewall
Fortinet UTM
Fortinet VPN
FortiSIEM
Fortiweb Web Application Firewall
FortiXDR
FreeBSDFreeBSD
FTPFTP
GallagherGallagher Access Control
GammaGamma
GitHubGitHub
GitLabGitLab
GoAnywhereGoAnywhere MFT
GoogleGCP CloudAudit
Gemini Enterprise
Google Cloud Platform
Google Workspace
Security Command Center
HalcyonHalcyon
HelpSystemsPowertech Identity and Access Manager
HornetHornetsecurity Cloud Email Security Services
HPAruba ClearPass Policy Manager
Aruba Mobility Master
Aruba Wireless controller
ArubaOS
HP iLO
HP LaserJet Printer
HP Print Server
HPE 3PAR StoreServ
HPE Comware
NonStop
HuaweiHuawei Enterprise Network Firewall
Huawei Unified Security Gateway
HUMAN SecurityHUMAN Bot Defender
IBMGuardium
HCL Notes
IBM
IBM Datapower
IBM Mainframe
QRadar SIEM
Security Access Manager
Sterling B2B Integrator
iBossIboss Cloud
IllumioIllumio Core
ImpervaAttack Analytics
Imperva Incapsula
Imperva SecureSphere
ImprivataImprivata
IMSSIMSS
IMSVAIMSVA
InfobloxBloxOne DDI
Infoblox NetMRI
Infoblox NIOS
InformaticaInformatica Cloud
Int64 SoftwareOVERLAPS
IpswitchMoveIt Transfer
IPTablesIPTables FW
IronscalesIronscales
IslandIsland Enterprise Browser
IvantiIvanti Pulse Secure
JamfJamf Protect
Johnson ControlsJohnson Controls P2000
JumpcloudJumpcloud
Juniper NetworksJuniper SRX Series
Junos OS
KasadaKasada
KasperskyKaspersky Endpoint Security for Business
Keeper SecurityKeeper
KempKemp LoadMaster
KnowBe4Security Awareness Training
KongKong Gateway
LanScopeLanScope Cat
LastPassLastPass
LenelOnGuard
LibraesvaLibraesva Email Security
LiquidFilesLiquidFiles
LogRhythmLogRhythm
NetMon
LookoutLookout
MalwarebytesMalwarebytes Endpoint Protection
ManageEngineADAuditPlus
ADManager Plus
ADSSP
PAM360
MariaDBMariaDB
McAfeeMcAfee Web Gateway
Menlo SecurityMenlo Security
MicroFocus ArcSightMicroFocus ArcSight
MicrosoftActive Directory Federation Services
Azure
Azure AD Activity Logs
Azure AD Sign-In Logs
Azure ATP
Azure Container Registry
Azure DevOps
Azure Event Hub
Azure Firewall
Azure Key Vault
Azure Kubernetes Service
Azure MFA
Azure Monitor
Azure Monitor - VM Insights
Azure Network Watcher
Copilot
Event Viewer - ADFS
Event Viewer - ADWS
Event Viewer - Application
Event Viewer - Applocker
Event Viewer - AzureADPasswordProtection-DCAgent
Event Viewer - AzureADPasswordProtection-ProxyService
Event Viewer - BFE Resorce Flows
Event Viewer - BITS-Client
Event Viewer - CAPI2
Event Viewer - CertificateServicesClient
Event Viewer - CodeIntegrity
Event Viewer - DFS-Replication
Event Viewer - Directory-Service
Event Viewer - DNSClient
Event Viewer - DNSServer
Event Viewer - File Replication Service
Event Viewer - FileShareShadowCopyProvider
Event Viewer - Kerberos-Key-Distribution-Center
Event Viewer - Kernel-IO
Event Viewer - Kernel-PnP
Event Viewer - KnownFolders
Event Viewer - Licensing-Platform
Event Viewer - LiveId
Event Viewer - LSA
Event Viewer - NetworkProfile
Event Viewer - NPS
Event Viewer - NTLM
Event Viewer - OpenSSH
Event Viewer - PowerShell
Event Viewer - PrintService
Event Viewer - RemoteDesktopServices
Event Viewer - Security
Event Viewer - Setup
Event Viewer - SMB
Event Viewer - System
Event Viewer - TaskScheduler
Event Viewer - TerminalServices
Event Viewer - TerminalServices-Gateway
Event Viewer - TerminalServices-LocalSessionManager
Event Viewer - TerminalServices-RemoteConnectionManager
Event Viewer - Windows Firewall
Event Viewer - WinNat
Event Viewer - WinRM
M365 Audit Logs
Microsoft 365
Microsoft Advanced Threat Analytics
Microsoft CAS
Microsoft Defender
Microsoft Defender for Cloud
Microsoft Defender for Endpoint
Microsoft DHCP Log
Microsoft DNS Log
Microsoft Entra
Microsoft Exchange
Microsoft IIS
Microsoft Intune
Microsoft Network Policy Server
Microsoft Purview
Microsoft RRAS
Microsoft Sentinel
Microsoft WMI Log
MSSQL
NetLogon
Network Security Group Flow Logs
Sysmon
Windows
Windows Defender Application Control
Windows Device registration service
MimecastCode42 Incydr
Mimecast Secure Email Gateway
Mimecast Targeted Threat Protection - URL
Monday.comMonday.com
MongoDBMongoDB
MvisionMvision
MysqlMysql
N3KN3K
NagiosNagios
NasuniNasuni
NetAppNetApp
NetApp Ontap
NetMotion WirelessNetMotion Wireless
NetskopeNetskope CASB
Netskope Security Cloud
Netskope Webtx
NetwrixNetwrix Auditor
NextDLPReveal
NightfallNightfall AI
NNTNNT ChangeTracker
Nozomi NetworksNozomi Networks Guardian
Obsidian SecuritySaaS Security
OktaOkta Adaptive MFA
Okta Workforce Identity Cloud
OnapsisOnapsis
OneLoginOneLogin
OneSpanDigipass for Apps
OneWelcomeOneWelcome Cloud Identity Platform
Open ShiftOpenShift
Open VPNOpen VPN
OpenAIChatGPT
OpenAI
OpenDJOpenDJ
OpenLDAPOpenLDAP
OracleOracle Cloud Infrastructure
Oracle Database
Oracle Public Cloud
Solaris
OrdrOrdr AI Protect
Ordr SCE
OsqueryOsquery
OSSECOSSEC
oVirtoVirt
PacketFencePacketFence
PagerDutyPagerDuty
Palo Alto NetworksCortex XDR
Cortex XSOAR
GlobalProtect
Palo Alto Aperture
Palo Alto NGFW
Palo Alto WildFire
Prisma Access
Prisma Cloud
Password Manager ProPassword Manager Pro
PerforcePerforce
pfSensepfSense
Picture PerfectPicture Perfect
Ping IdentityForgeRock
Ping Access
Ping Identity
PingFederate
PingOne
PortkeyPortkey
PortnoxPortnox Cloud
PostfixPostfix
PostgreSQLPostgreSQL
PowerDNSPowerDNS Recursor
PowerSentryPowerSentry
ProgressProgress ShareFile
ProofpointObserveIT
Proofpoint CASB
Proofpoint Email Protection
Proofpoint Enterprise Protection
Targeted Attack Platform
QualysQualys AssetView
Quest SoftwareQuest Change Auditor for Active Directory
Quest Change Auditor for SQL Server
RadwareAlteon
Radware WAF
Rapid7Rapid7 InsightVM
Recorded FutureRecorded Future Threat Intelligence
RedShieldRedShield WAF
Riverbed SteelheadRiverbed Steelhead
RS2 TechnologiesRS2 Technologies
RSARSA Authentication Manager
RSA NetWitness Platform
SecurID
RubrikRubrik Cloud Data Management
SailpointIdentityNow
Sailpoint IIQ
SecurityIQ
SalesforceSalesforce
SangforSangfor NGAF
SAPSAP
SaviyntSaviynt
SecomeaSecomea
SecureAuthSecureAuth IDP
SecureAuth Login
SecureLinkSecureLink
SecureNetSecureNet
SecurEnvoySecurEnvoy Multi-Factor Authentication
SemperisSemperis DSP
SentinelOneEvent Viewer - Sentinelone
Scalyr
Singularity Platform
Vigilance
ServiceNowServiceNow
ShibbolethShibboleth
SiemensSiemens Access Control
SIGSCISIGSCI
SilverfortSilverfort Authentication Platform
SiteMinderSymantec SiteMinder
SkyformationSkyformation
Skyhigh SecuritySecure Web Gateway
Skyhigh CASB
Skyhigh Security Cloud
SkySeaSkySea ClientView
SlackSlack
SmartSuiteSmartSuite
SnortSnort
SnowflakeSnowflake
SophosSophos Endpoint Protection
Sophos UTM
Sophos XG Firewall
Sophos XGS Firewall
Sophos ZTNA
SplunkSplunk ES
Splunk Stream
SquidSquid
StealthBitsStealthIntercept
SunOneSunOne
SuricataSuricata
SwiftSwift
SwimlaneSwimlane Turbine
SwivelSwivel
SymantecSymantec Advanced Threat Protection
Symantec CloudSOC
Symantec Content Analysis System
Symantec DLP
Symantec Email Security
Symantec Endpoint Protection
Symantec VIP
Symantec Web Security Service
Synology NASSynology NAS
SysdigSysdig Monitor
TaniumTanium Cloud Platform
Tanium Core Platform
Tanium Integrity Monitor
Tanium Threat Response
TenableTenable Cloud Security
Tenable Identity Exposure
Tenable Vulnerability Management
Tenable Web App Scanning
TeradataTeradata RDBMS
TessianTessian Cloud Email Security
ThoughtSpotThoughtSpot
ThreatBlockrThreatBlockr
TrellixTrellix Central Management
Trellix Database Security
Trellix DLP Endpoint
Trellix Email Security
Trellix Endpoint Security
Trellix Endpoint Security (HX)
Trellix ePolicy Orchestrator
Trellix Helix
Trellix Network Security (NX)
Trellix Network Security Platform
Trellix Web MPS
Trend MicroApex One
Deep Discovery Inspector
Deep Security
OfficeScan
TippingPoint NGIPS
Trend Micro ScanMail
Vision One
Tripwire EnterpriseTripwire Enterprise
TXOne NetworksStellarOne
StellarProtect
TycoCCURE Building Management System
UbiquitiUnifi Access Point
UnixAuditbeat
rsyslog
Unix
Unix Auditd
Unix dhcpd
Unix Named
Unix Sendmail
VaronisVaronis Data Security Platform
VBCorpVBCorp
VectraVectra Cognito Detect
VeeamVeeam
VenafiTLS Protect
VirtruVirtru
VismaMegaflex
VMwareCarbon Black App Control
Carbon Black CES
Carbon Black EDR
vCenter
VMware AirWatch
VMware ESXi
VMware Horizon
VMware Identity Manager
VMware NSX
VMware VeloCloud SD-WAN
VMware View
VormetricVormetric
WallixWallix Bastion
WatchguardWatchguard
WebloginWeblogin
WizWiz
WorkdayWorkday
xPLANxPLAN
XPSXPS
ZeekZeek
Zero NetworksZero Networks
ZeroFoxZeroFox Protection
ZimperiumZimperium MTD
ZoomZoom
ZscalerFW Zscaler Cloud
Zscaler Breach Predictor
Zscaler Deception
Zscaler Internet Access
Zscaler Private Access
Zyxel NetworksZyxel USG FLEX