Darktrace / cloud integrations

Technology Integrations

We know how important it is for your security solutions to talk to each other. Darktrace was built with an open architecture, making integrations quick and simple. Find some common cases listed below. Custom integrations are available upon request.

Integrations with Darktrace/Cloud

AWS

Detect and respond to cloud based threats across AWS services from EC2 to EKS and monitor administrative and resource management activity.

AWS Lambda

Take custom actions through invoked AWS Lambda functions to respond to any threat across your AWS footprint.

Azure

Detect and respond to cloud based threats across IaaS, PaaS, and control planes. Monitor M365 administration and access via AzureAD and cloud infrastructure resource management.

Azure Sentinel

Analyze Darktrace AI Analyst incidents and model breach alerts in Azure Sentinel.

Carbon Black

Enrich Darktrace AI decision-making with alerts from Carbon Black.

Citrix TSA

Enrich Darktrace user tracking for Citrix Virtual Apps and Virtual Desktop users.

Commvault Cloud

Enrich the Commvault platform with real time security insights from Darktrace Detect, so organizations can respond to threats reducing impact to their data

Cortex XSOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Crowdstrike Falcon

Enrich Darktrace AI decision-making with alerts from the Crowdstrike Falcon platform.

Cybereason EDR

Enrich Darktrace AI decision-making with alerts from Cybereason.

Duo

Detect and respond to threats from across the organization via Duo IAM.

Elastic Security

Analyze, correlate, and visualize Darktrace AI Analyst incidents and model breach alerts.

FortiSOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

Google Cloud Platform

Detect and respond to cloud based threats across VMs and containers and monitor administrative activity and resource management in GCP.

Hunters SOC Platform

Integrate Darktrace with Hunters to allow triaging of Darktrace alerts and incidents via the Hunters console, as well as further investigating and correlating them to related threats

InsightConnect

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

InsightIDR

Analyze Darktrace AI Analyst incidents and model breach alerts in InsightIDR.

InsightVM

Enrich Darktrace detection and response with additional device information.

Jira

Create Jira issues for AI Analyst incidents, model breaches, and system health alerts.

Keysight

Capture and direct cloud or on-prem traffic with ease for Darktrace analysis.

LogRhythm

Analyze Darktrace AI Analyst incidents and model breach alerts in LogRhythm.

Microsoft Graph Security API

Enrich Darktrace detection with alerts from Microsoft Cloud App Security, the Microsoft Defender suite, Azure Information Protection, and Azure Identity Protection.

Microsoft Teams

Insert Darktrace alerting into Microsoft Teams channels.

Netskope

Detect unusual user activity and threats in Netskope Next Gen Secure Web Gateway.

Nutanix

Deploy Darktrace virtual Sensors (vSensors) in Nutanix virtual machine environments, mirroring traffic back to a Darktrace master appliance. Nutanix ready certified (AHV)

Okta

Detect and respond to threats from across the organization via Okta IAM.

QRadar

Analyze Darktrace AI Analyst incidents and model breach alerts in Qradar.

ReliaQuest

Investigate AI Analyst Incidents and Model Alerts within GreyMatter. Commands can be executed to pull back further information from Darktrace.

ServiceNow ITSM

Automate IT tasks in ITSM triggered by Darktrace alerts.

ServiceNow SecOps

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Siemplify

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Slack

Insert Darktrace alerting into a Slack channel or chat.

Splunk

Analyze Darktrace AI Analyst incidents and model breach alerts in CIM compatible Splunk dashboards, and poll Splunk data to enrich Darktrace modeling with additional contextual information.

Splunk SOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.