Integration catalog updates 🎉

Here is a recap of recent intakes and automations added to our Integration catalog.

New Intakes

New Automations

  • Microsoft Defender EDR actions (create iocs, isolate machine, deisolate machine, scan a machine, stop and quarantine a file, update an alert, comment an alert, get machine action, restrict code execution, unrestrict code execution). Read more
  • Crowdstrike EDR actions (update alert status, comment alert). Read more
  • HarfangLab EDR actions (create iocs, comment threat, update threat status, download file from endpoint). Read more

Credits goes to the HarfangLab team for developing the download file from endpoint action 🎉

What do you think about this update?