Introduction to Integrations
LAST UPDATED: OCTOBER 7, 2025
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
The following is a list of active integrations currently supported by D3:
Analytics
Google BigQuery

.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Microsoft Lists

.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Snowflake
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Cloud Services

AWS CloudWatch

.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
AWS ECS
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
AWS EKS

AWS S3

AWS SQS
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
AWS SSM

Azure Application Gateway




Azure Storage Resource Provider

Azure Traffic Manager
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Azure Virtual Machine



Google Cloud Compute
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Google Cloud Storage
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)

Google Resource Manager


Matano

Microsoft Defender for Cloud Apps

Microsoft OneDrive


Credential Management
CyberArk Central Credential Provider



Data Enrichment
Alexa Rank Indicator


Kaduu.io

MonAPI

Recorded Future-SecurityTrails

SailPoint IdentityIQ

Screenshot Machine

Sucuri SiteCheck

unshorten.me

Webz.io

DevOps

AWS ECR

Azure Container Instance

Azure Container Registry

Azure Database for MySQL

Azure Database for PostgreSQL

Azure DevTest Labs

Azure Managed Disk Snapshots

Azure Resource Group

Azure Resource Management

Azure SQL Databases


Git


GitLab

Google Cloud Spanner


MongoDB

Redis

Email & Messaging
Cisco Webex

Everbridge

Gmail


IMAP


Microsoft 365 Defender (Email & collaboration)







SMTP

Telegram


Twitter

Zimbra Mail

Zoom

Email Security
Broadcom Symantec Messaging Gateway


Cofense Vision

Cyren Inbox Security

GreatHorn



Perception Point


Trellix FireEye ETP

Trellix FireEye EX

Endpoint Security

Blackberry Cylance Endpoint Security

Broadcom Symantec Endpoint Protection

Cisco Secure Endpoint


Crowdstrike Falcon Streaming

CrowdStrike Threat Graph


Cymulate


Deep Instinct


Druva Ransomware Response

Fidelis Endpoint


Harfang Lab EDR

HYAS Protect

Ivanti Service Manager

Mcafee MVISION EDR(Beta)

Microsoft Defender for Endpoint




SentinelOne Singularity Operations Center

Sophos Central

Sophos Intercept X

Tanium

Trellix FireEye Endpoint Security (HX)


Trellix McAfee MVISION EDR

Trellix McAfee MVISION ePO

Trend Micro Deep Security Manager


VMware Carbon Black Cloud

VMWare Carbon Black Cloud Endpoint Standard


Forensics & Malware Analysis
Accessdata Quin-C


Cisco Secure Malware Analytics

ClamAV


Cuckoo Sandbox

Cyber Triage

Datto BitDam

FortiSandbox

Google Rapid Response

Hybrid Analysis

Intezer Analyze


Koodous

OPSWAT SNDBox

Palo Alto Networks WildFire

Recorded Future Hatching

SafeBreach

VMRay Analyzer

VMware ESX (Lastline)

Identity & Access Management

Active Directory V2

Active Role Server




Azure Key Vault

Azure Key Vault Secret

BeyondTrust Password Safe

Cisco Identity Services Engine


CyberArk Privileged Access Manager

CyberArk Privileged Access Security


Keeper Commander


Silverfort


IT and Infrastructure
Atlassian Confluence Cloud

Atlassian Jira Service Management
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Automox
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
BMC Remedy AR

Bonusly
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Box
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Dell Secureworks CTP

EasyVista

Freshdesk

IBM Remedy

Ivanti Cherwell



LogicMonitor

ManageEngine ServiceDesk Plus

ManageEngine ServiceDesk Plus MSP

Monday.com

Monday.com V2


Request Tracker

RSA Archer

Salesforce

ServiceNow


Sevco Security

Splunk On-Call (VictorOps)


TheHive (3.x)

VMware vCenter Server


ITSM
Network Security

Arista Awake Security

Arkime (Moloch)

Authentic8 Silo

AWS WAF

Azure Load Balancer


Barracuda Email Security Gateway

Barracuda Web Application Firewall

Bricata

Cato Networks

Cato V2


Cisco Adaptive Security Appliance


Cisco Meraki

Cisco Secure Cloud Analytics (Stealthwatch Cloud)

Cisco Secure Network Analytics (Stealthwatch)

Cisco Umbrella Cloud Security


CloudShark


Cyber CNS V4

DataDome



F5 Application Security Manager (WAF)

F5 BIG-IP Load Balancer

F5 Firewall

Fidelis Elevate Network

Forcepoint


FortiMonitor

Google Cloud DLP

.png?inst-v=5083f983-7315-48cd-9dec-17b1ba256045)
Imperva Cloud WAF (Incapsula WAF)


Juniper Networks SRX

Kemp LoadMaster

McAfee Web Gateway


Microsoft Purview Audit alert_v2

Microsoft Purview eDiscovery

Microsoft Purview eDiscovery V2


Nmap(Network Mapper)

OPSWAT MetaDefender

Palo Alto Networks FireWall

Palo Alto Networks FireWall V7.1

Palo Alto Networks FireWall V10




SCADAfence

Signal Sciences



Symantec DLP

Team Cymru

Trellix FireEye Network Security (NX)

Trellix McAfee Network Security Manager


Versa SASE (Secure Access Service Edge)

WatchGuard FireBox

Zeek


Other
Acronis

AWS TT

Big Panda



D3 Integration

Google Calendar

Google Gemini

KnowBe4 Security Awareness User Events

Mcafee Database Activity Monitoring

Mimecast API 1.0





Stepes Translation


Zscaler Workflow Automation

Security Optimization Platform
AttackIQ

SIEM & XDR

AlienVault USM Central

ArcSight Enterprise Security Manager

ArcSight Logger


Azure REST

Binalyze Air

BluSapphire Intelligent Cyber Defense


Cisco SecureX


ConnectWise SIEM

Coralogix




Cynet 360 AutoXDR

Datadog

Datadog V2


Deep Instinct V2







Exabeam Security Operations Platform




Fluency

FortiAnalyzer

FortiSIEM


Google Chronicle Rules Engine v1

Google Chronicle Rules Engine v2

Google Chronicle Search API

Google Chronicle Stream Detection v2

Graylog


Kaspersky Security Center OpenAPI

LimaCharlie


LogRhythm

LogRhythm Axon


Logz.io


Microsoft Defender for Cloud


Proofpoint Targeted Attack Protection




RSA NetWitness

RSA Netwitness Log Decoder SDK

SaaS Alerts

Security Onion


SGBox


Splunk



Stellar Cyber

Stellar Cyber Starlight


Sumo Logic Cloud SIEM Enterprise (Sumo Logic CSE)

Sumo Logic V2

Trellix FireEye Helix






Threat Intelligence

AlphaSOC




BrightCloud Threat Intelligence

C2Sec

Censys

CheckPhish


Cisco Umbrella Reporting


Cofense Intelligence


Computer Incident Response Center Luxembourg (CIRCL)

CrowdStrike Falcon Intelligence

CrowdStrike Falcon MalQuery

CTM360

CyberInt


CyberTotal

Cyfirma

D3 Tool Kit

DeHashed

Digital Shadows

Digital Shadows Searchlight

DNSLytics

DomainTools

EclecticIQ Platform


Flashpoint Ignite

Flashpoint.io

Google Safe Browsing


Group IB

Have I Been Pwned?

HYAS Insight


IPinfo.io

IPQualityScore


isitPhishing

iZOOLogic

JsonWhois



Mandiant

MaxMind

Meta ThreatExchange

Minemeld




OpenCTI v5.12

OpenDXL

Openphish

Outpost24 Blueliv Threat Compass

Outpost24 Blueliv Threat Context

Palo Alto Autofocus

Phishlabs Case

Phishlabs Feed

PhishTank

Proofpoint Emerging Threats Intelligence

Pulsedive


RiskIQ PassiveTotal

Shodan



SOC Radar Incident V3

Spamhaus


ThinkstCanary

ThreatFox

ThreatMiner


Threatray

ThreatWorx

Trellix FireEye CM

Trellix FireEye Feed

Trellix McAfee Advanced Threat Defense




VirusTotal


WhatIsMyBrowser.com

WHOISIQ

WhoisXML API

YETI

ZeroFox

Vulnerability Management
cve-search

CYRISMA

Digital Defense Frontline Vulnerability Manager

IBM BigFix

Kenna Security





Rapid7 InsightVM Cloud



Tenable.sc


VulDB V2






