Introduction to Integrations
LAST UPDATED: JUNE 2, 2025
.png?inst-v=acb7bb4a-0cbd-4fcb-b369-77d959da462a)
The following is a list of active integrations currently supported by D3:
Analytics
Google BigQuery
Microsoft Lists
Snowflake
Cloud Services
AWS CloudWatch
AWS ECS
AWS EKS
AWS S3
AWS SQS
AWS SSM
Azure Application Gateway
Azure Storage Resource Provider
Azure Traffic Manager
Azure Virtual Machine
Google Cloud Compute
Google Cloud Storage
Google Resource Manager
Matano
Microsoft OneDrive
Alexa Rank Indicator
Kaduu.io
MonAPI
SailPoint IdentityIQ
Screenshot Machine
Sucuri SiteCheck
unshorten.me
Webz.io
DevOps
AWS ECR
Azure Container Instance
Azure Container Registry
Azure Database for MySQL
Azure Database for PostgreSQL
Azure DevTest Labs
Azure Managed Disk Snapshots
Azure Resource Group
Azure Resource Management
Azure SQL Databases
Git
GitLab
Google Cloud Spanner
MongoDB
Redis
Email & Messaging
Email Security
Broadcom Symantec Messaging Gateway
Cofense Vision
Cyren Inbox Security
GreatHorn
Perception Point
Trellix FireEye ETP
Trellix FireEye EX
Endpoint Security
Broadcom Symantec Endpoint Protection
Cisco Secure Endpoint
CrowdStrike Falcon
Crowdstrike Falcon Streaming
CrowdStrike Threat Graph
Cymulate
Deep Instinct
Druva Ransomware Response
Fidelis Endpoint
FortiEDR
Harfang Lab EDR
HYAS Protect
Ivanti Service Manager
Mcafee MVISION EDR(Beta)
SentinelOne Singularity Operations Center
Sophos Central
Sophos Intercept X
Tanium
Trellix FireEye Endpoint Security (HX)
Trellix McAfee MVISION EDR
Trellix McAfee MVISION ePO
VMware Carbon Black Cloud
Forensics & Malware Analysis
Accessdata Quin-C
ANY.RUN
Cisco Secure Malware Analytics
ClamAV
Cuckoo Sandbox
Cyber Triage
Datto BitDam
FortiSandbox
Google Rapid Response
Hybrid Analysis
Intezer Analyze
Koodous
OPSWAT SNDBox
Palo Alto Networks WildFire
Recorded Future Hatching
SafeBreach
VMRay Analyzer
VMware ESX (Lastline)
Identity & Access Management
Active Directory V2
Active Role Server
Azure Key Vault
Azure Key Vault Secret
BeyondTrust Password Safe
Cisco Identity Services Engine
CyberArk Privileged Access Security
Keeper Commander
Silverfort
IT and Infrastructure
Atlassian Confluence Cloud
Automox
BMC Remedy AR
Bonusly
Box
Dell Secureworks CTP
EasyVista
Freshdesk
IBM Remedy
Ivanti Cherwell
LogicMonitor
ManageEngine ServiceDesk Plus
ManageEngine ServiceDesk Plus MSP
Monday.com V2
Request Tracker
RSA Archer
Salesforce
ServiceNow
Sevco Security
Splunk On-Call (VictorOps)
TheHive (3.x)
VMware vCenter Server
Arista Awake Security
Arkime (Moloch)
Authentic8 Silo
AWS WAF
Azure Load Balancer
Barracuda Email Security Gateway
Bricata
Cato Networks
Cato V2
Cisco Meraki
Cisco Secure Cloud Analytics (Stealthwatch Cloud)
Cisco Secure Network Analytics (Stealthwatch)
Cisco Umbrella Cloud Security
CloudShark
Cyber CNS V4
DataDome
F5 BIG-IP Load Balancer
F5 Firewall
Fidelis Elevate Network
Forcepoint
FortiMonitor
Google Cloud DLP
Juniper Networks SRX
Kemp LoadMaster
McAfee Web Gateway
Microsoft Purview eDiscovery
Microsoft Purview eDiscovery V2
Nmap(Network Mapper)
OPSWAT MetaDefender
Palo Alto Networks FireWall
Palo Alto Networks FireWall V7.1
Palo Alto Networks PAN-OS
SCADAfence
Signal Sciences
Symantec DLP
Team Cymru
Trellix FireEye Network Security (NX)
Trellix McAfee Network Security Manager
Versa SASE (Secure Access Service Edge)
WatchGuard FireBox
Zeek
Other
Acronis
AWS TT
Big Panda
D3 Integration
Google Calendar
Google Gemini
KnowBe4 Security Awareness User Events
Mcafee Database Activity Monitoring
Mimecast API 1.0
Stepes Translation
Zscaler Workflow Automation
Security Optimization Platform
AttackIQ
SIEM & XDR
AlienVault USM Central
ArcSight Logger
Azure REST
Binalyze Air
BluSapphire Intelligent Cyber Defense
Cisco SecureX
Claroty
ConnectWise SIEM
Coralogix
Cynet 360 AutoXDR
Datadog
Datadog V2
Deep Instinct V2
Fluency
FortiAnalyzer
FortiSIEM
Google Chronicle Rules Engine v1
Google Chronicle Rules Engine v2
Google Chronicle Search API
Google Chronicle Stream Detection v2
Graylog
LimaCharlie
LogRhythm
LogRhythm Axon
Logz.io
Microsoft Defender for Cloud
Rapid7 InsightIDR V2
RSA NetWitness
RSA Netwitness Log Decoder SDK
SaaS Alerts
Security Onion
Securonix
SGBox
Splunk
Stamus Clear NDR
Stellar Cyber
Stellar Cyber Starlight
Sumo Logic V2
Trellix FireEye Helix
Trend Micro Apex Central
Threat Intelligence
AlphaSOC
C2Sec
Censys
CheckPhish
Cisco Umbrella Reporting
Cofense Intelligence
Computer Incident Response Center Luxembourg (CIRCL)
CrowdStrike Falcon Intelligence
CrowdStrike Falcon MalQuery
CTM360
CyberInt
CyberTotal
Cyfirma
D3 Tool Kit
DeHashed
Digital Shadows
Digital Shadows Searchlight
DNSLytics
DomainTools
EclecticIQ Platform
Flashpoint Ignite
Google Safe Browsing
Group IB
Have I Been Pwned?
HYAS Insight
IPQualityScore
isitPhishing
iZOOLogic
JsonWhois
Mandiant
MaxMind
Meta ThreatExchange
Minemeld
OpenCTI v5.12
OpenDXL
Openphish
Outpost24 Blueliv Threat Compass
Outpost24 Blueliv Threat Context
Palo Alto Autofocus
Phishlabs Case
Phishlabs Feed
PhishTank
Proofpoint Emerging Threats Intelligence
Pulsedive
Recorded Future
RiskIQ PassiveTotal
Shodan
SOC Radar Incident V3
Spamhaus
TAXII 2 Threat Feed
ThinkstCanary
ThreatFox
ThreatMiner
Threatray
ThreatWorx
Trellix FireEye CM
Trellix FireEye Feed
URL2PNG
URLhaus
VirusTotal
WhatIsMyBrowser.com
WHOISIQ
WhoisXML API
YETI
ZeroFox
Vulnerability Management
cve-search
CYRISMA
Digital Defense Frontline Vulnerability Manager
IBM BigFix
Kenna Security
Rapid7 InsightVM Cloud
Tenable.sc
VulDB V2