[
  "Netclean_ProActive_Incidents",
  "42CrunchAPIProtection",
  "AIVectraDetect",
  "AIVectraStream",
  "VectraXDR",
  "AWS",
  "AWSS3",
  "AWSSecurityHub",
  "Agari",
  "AkamaiSecurityEvents",
  "AlcideKAudit",
  "AlsidForAD",
  "Anvilogic",
  "Armorblox",
  "ApacheHTTPServer",
  "ApacheTomcat",
  "ARGOSCloudSecurity",
  "AristaAwakeSecurity",
  "ASimDnsActivityLogs",
  "ArubaClearPass",
  "AzureActiveDirectory",
  "AzureActiveDirectoryIdentityProtection",
  "AzureActivity",
  "AzureAdvancedThreatProtection",
  "AzureFirewall",
  "AzureInformationProtection",
  "AzureKeyVault",
  "AzureKubernetes",
  "AzureMonitor(IIS)",
  "AzureMonitor(VMInsights)",
  "AzureMonitor(WireData)",
  "AzureNSG",
  "AzureSecurityCenter",
  "AzureSql",
  "AzureStorageAccount",
  "Barracuda",
  "BarracudaCloudFirewall",
  "BetterMTD",
  "BehaviorAnalytics",
  "BeyondSecuritybeSECURE",
  "Bitglass",
  "BitSight",
  "BlackberryCylancePROTECT",
  "BloodHoundEnterprise",
  "BoschAIShield",
  "BoxDataConnector",
  "BroadcomSymantecDLP",
  "CEF",
  "CheckPoint",
  "CiscoASA",
  "CiscoAsaAma",
  "CiscoDuoSecurity",
  "CiscoFirepowerEStreamer",
  "CiscoISE",
  "CiscoMeraki",
  "CiscoSDWAN",
  "CiscoSecureEndpoint",
  "CiscoSEG",
  "CiscoUCS",
  "CiscoUmbrellaDataConnector",
  "CiscoWSA",
  "Citrix",
  "CitrixWAF",
  "Claroty",
  "CloudflareDataConnector",
  "CognniSentinelDataConnector",
  "ContrastProtect",
  "Corelight",
  "CrowdStrikeFalconEndpointProtection",
  "CyberArk",
  "CyberArkEPM",
  "CyberpionSecurityLogs",
  "CynerioSecurityEvents",
  "DDOS",
  "DNS",
  "Darktrace",
  "DarktraceRESTConnector",
  "DataminrPulseAlerts",
  "Dataverse",
  "DigitalGuardianDLP",
  "DigitalShadows",
  "DragosSitestoreCCP",
  "Dynamics365",
  "Dynamics365Finance",
  "EgressDefend",
  "ESETEnterpriseInspector",
  "ESETPROTECT",
  "EsetSMC",
  "ESI-ExchangeAdminAuditLogEvents",
  "ExtraHopNetworks",
  "F5",
  "F5BigIp",
  "Flare",
  "ForcepointCasb",
  "ForcepointDlp",
  "ForcepointNgfw",
  "ForgeRock",
  "Fortinet",
  "FortiWeb",
  "GCPDNSDataConnector",
  "GoogleSCCDefinition",
  "GWorkspaceRAPI",
  "GoogleWorkspaceReportsAPI",
  "GreyNoise2SentinelAPI",
  "IdentityInfo",
  "ImpervaWAFCloudAPI",
  "ImpervaWAFGateway",
  "ImportedConnector",
  "InfobloxCloudDataConnector",
  "InfobloxNIOS",
  "IoT",
  "JamfProtect",
  "JiraAuditAPI",
  "JuniperSRX",
  "KeeperSecurityPush2",
  "LastPass",
  "LookoutAPI",
  "LumenThreatFeedConnector",
  "McAfeeePO",
  "MicrosoftAzurePurview",
  "MicrosoftCloudAppSecurity",
  "MicrosoftCopilot",
  "MicrosoftDefenderAdvancedThreatProtection",
  "MicrosoftSysmonForLinux",
  "MicrosoftThreatProtection",
  "MimecastSEGAPI",
  "MorphisecCCF",
  "NasuniEdgeAppliance",
  "NXLogDnsLogs",
  "NXLogLinuxAudit",
  "Netskope",
  "Office365",
  "OfficeATP",
  "OktaSSO",
  "OktaSSOv2",
  "OnapsisPlatform",
  "OneIdentity",
  "OCILogs",
  "OracleDatabaseAudit",
  "OracleCloudInfrastructureLogsConnector",
  "OracleWebLogicServer",
  "OrcaSecurityAlerts",
  "PaloAltoCDL",
  "PaloAltoNetworks",
  "PaloAltoPrismaCloud",
  "Perimeter81ActivityLogs",
  "PingFederate",
  "PostgreSQL",
  "PowerAutomate",
  "PowerPlatformAdmin",
  "ProofpointPOD",
  "ProofpointTAP",
  "ProofpointTAPNativePoller",
  "ProofpointTAPv2",
  "PulseConnectSecure",
  "QscoutAppEventsCCFDefinition",
  "QualysKB",
  "QualysVulnerabilityManagement",
  "RedCanaryDataConnector",
  "RubrikSecurityCloudAzureFunctions",
  "SailPointIdentityNow",
  "SalesforceServiceCloud",
  "SalesforceServiceCloudCCPDefinition",
  "SAP",
  "SAPBTPAuditEvents",
  "SAPLogServ",
  "SAPETDAlerts",
  "SecurityEvents",
  "SemperisDSP",
  "SenservaPro",
  "SentinelOne",
  "SlackAuditAPI",
  "Snowflake",
  "SonicWallFirewall",
  "SonraiDataConnector",
  "SophosCloudOptix",
  "SophosXGFirewall",
  "SquadraTechnologiesSecRmm",
  "SquidProxy",
  "Symantec",
  "SymantecEndpointProtection",
  "SymantecProxySG",
  "SymantecVIP",
  "Syslog",
  "Tenable.ad",
  "TenableVM",
  "TenableIE",
  "ThreatIntelligence",
  "ThreatIntelligenceTaxii",
  "ThreatIntelligenceUploadIndicatorsAPI",
  "DelineaSecretServer_CEF",
  "TrendMicro",
  "TrendMicroApexOne",
  "TrendMicroCAS",
  "TrendMicroTippingPoint",
  "TrendMicroXDR",
  "UbiquitiUnifi",
  "vArmourAC",
  "VMwareCarbonBlack",
  "vCenter",
  "VMwareESXi",
  "VMwareSDWAN",
  "WAF",
  "WindowsFirewall",
  "WindowsForwardedEvents",
  "WireX_Systems_NFP",
  "ZimperiumMtdAlerts",
  "Zscaler",
  "ZscalerPrivateAccess",
  "illusiveAttackManagementSystem",
  "WindowsSecurityEvents",
  "IronNetIronDefense",
  "GCPIAMDataConnector",
  "Illusive",
  "NGINXHTTPServer",
  "ZeroNetworksSegmentAuditFunction",
  "ZeroNetworksSegmentAuditNativePoller",
  "Theom",
  "Votiro",
  "ISCBind",
  "DynatraceRuntimeVulnerabilities",
  "DynatraceAttacks",
  "DynatraceAuditLogs",
  "DynatraceProblems",
  "Authomize",
  "MicrosoftDefenderThreatIntelligence",
  "ZeroFox_Alert_Polling",
  "CortexXDR",
  "CorelightConnectorExporter",
  "MimecastSIEMAPI",
  "MimecastTTPAPI",
  "MimecastAuditAPI",
  "PingFederateAma",
  "vArmourACAma",
  "ContrastProtectAma",
  "InfobloxCloudDataConnectorAma",
  "ClarotyAma",
  "illusiveAttackManagementSystemAma",
  "TrendMicroApexOneAma",
  "PaloAltoCDLAma",
  "CiscoSEGAma",
  "AtlassianBeaconAlerts",
  "GCPAuditLogsDefinition",
  "PrancerLogData",
  "MicrosoftDefenderForCloudTenantBased",
  "RidgeBotDataConnector",
  "ValenceSecurity",
  "HVPollingIDAzureFunctions",
  "CBSPollingIDAzureFunctions",
  "AzureCloudNGFWByPaloAltoNetworks",
  "PaloAltoNetworksAma",
  "FortinetAma",
  "CrowdStrikeFalconEndpointProtectionAma",
  "AIVectraDetectAma",
  "ZscalerAma",
  "SyslogAma",
  "FortinetFortiWebAma",
  "InfobloxSOCInsightsDataConnector_API",
  "InfobloxSOCInsightsDataConnector_Legacy",
  "InfobloxSOCInsightsDataConnector_AMA",
  "NetskopeDataConnector",
  "NetskopeWebTransactionsDataConnector",
  "CefAma",
  "WindowsFirewallAma",
  "1Password",
  "RadiflowIsid",
  "CustomLogsAma",
  "SilverfortAma",
  "IllumioSaaSDataConnector",
  "CTERA",
  "Workday",
  "SamsungDCDefinition",
  "CommvaultSecurityIQ_CL",
  "ExtraHop",
  "ContrastADR",
  "CyfirmaAttackSurfaceAlertsConnector",
  "CyfirmaBrandIntelligenceAlertsDC",
  "CyfirmaDigitalRiskAlertsConnector",
  "CyfirmaVulnerabilitiesIntelDC",
  "CyfirmaCyberIntelligenceDC",
  "VeeamCustomTablesDataConnector",
  "CyfirmaCompromisedAccountsDataConnector",
  "RSAIDPlus_AdminLogs_Connector",
  "TacitRedThreatIntel",
  "CyrenThreatIntel",
  "CybleVisionAlerts"
]