HYAS Integrations

Our Integrations

HYAS Protect

Microsoft Sentinel

Microsoft Sentinel is a scalable, cloud-native SIEM and SOAR solution that enhances security analytics across your enterprise. The HYAS Protect integration seamlessly ingests DNS logs into Sentinel, providing deep visibility into DNS traffic and enabling automated workflows, custom detection rules, and advanced threat analysis. By correlating HYAS Protect data with other sources, Sentinel identifies and responds to malicious activity automatically, empowering proactive threat defense and strengthening your overall security posture. Please contact us for more details!

HYAS Insight

Anomali ThreatStream

Anomali detects adversaries and tells you who they are. Organizations rely on the Anomali Threat Platform to detect threats, understand the adversary, and respond effectively. Anomali arms security teams with machine learning optimized threat intelligence and identifies hidden threats targeting their environments. Anomali enables organizations to collaborate and share threat information among trusted communities and is the most widely adopted platform for ISACs worldwide.

HYAS Protect

ConnectWise

The ConnectWise Invent program is a secure integration platform for third-party software providers (TSPs) to merge their solutions with ConnectWise’s innovative software. By integrating HYAS Protect into the ConnectWise ecosystem, users gain a leading cyber-resiliency solution that addresses market challenges, endorsed by CISA and the NSA, and aligns with multiple standards to combat evolving cyber threats. This integration enhances security posture and mitigates cyber threats and operational risks effectively.

HYAS Insight

Cortex

Palo Alto Networks’ Cortex XSOAR aims to make security more manageable for SecOps teams. The comprehensive platform provides automated incident response workflows and can be customized and scaled based on your organization’s needs. By integrating HYAS Insight, users can dynamically investigate PassiveDNS, DynamicDNS, WHOIS, malware, and C2 attribution information.

HYAS Protect

Fortinet

HYAS and Fortinet have partnered to deliver an industry-leading security solution to address the rapidly growing cyber security challenges being faced today. The integration of HYAS’s Protective DNS product into Fortinet FortiGate is enabled through the Fabric-Ready Program in the Fortinet Open Fabric Ecosystem.

HYAS Insight

Maltego

Maltego is a visual link analysis tool that offers real-time data mining and the representation of this information on a node-based graph, making patterns in said information easily identifiable. Maltego provides a library of Transforms for connecting data from open sources, commercial data partners, and internal data. Since its launch in 2008, Maltego has empowered a million investigations in industries ranging from law enforcement to finance and banking.

HYAS Protect

Microsoft Defender for Endpoint

Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. The HYAS Protect integration with Defender for Endpoint improves enterprise security by analyzing Defender for Endpoint sensor data to detect communication with malicious URLs/domains and enabling those domains to be blocked. HYAS Protect combines infrastructure expertise and multivariate communication pattern analysis to deliver reputational verdicts for any domain and infrastructure, allowing Defender for Endpoint to preempt attacks at the network layer.

HYAS Insight

Microsoft Azure Sentinel

Microsoft Azure Sentinel is a scalable, cloud-native, SIEM and SOAR solution. Azure Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Combining HYAS Insight and Azure Sentinel improves visibility and productivity for cyber security analysts, researchers, and investigators while vastly increasing the accuracy of their findings.

HYAS Insight

MISP Threat Sharing

An open-source threat intelligence platform, MISP detects indicators of compromise based on analysis and correlation, but it also sources data from the community to react to threats more quickly. Once integrated, MISP can provide direct, high-volume access to HYAS Insight’s unrivaled threat intelligence platform, allowing investigators and analysts to understand and defend against cyber adversaries and their infrastructure.

HYAS Insight

Polarity

Polarity analyzes the contents of users’ computers screens and gives them real-time access to information without affecting their existing workflow. Polarity enables “HYAS Insight anywhere” so Polarity users can review anything on their screen and see in real time what can be gleaned from HYAS Insight. Combining Polarity and HYAS helps you to understand the story in your data by overlaying contextual information and explainable threat intelligence as you work, giving you the right data at the right time to make informed decisions and take action.

HYAS Insight

RipJar

Ripjar’s Labyrinth for Threat Investigations (LTI) helps organizations with the complex challenge of mitigating both physical and cyber threats, from internal and external sources. HYAS and RipJar’s partnership provides users with comprehensive, enterprise-wide approach to threat exploration at scale. Analysts can rapidly identify and manage potentially malicious domains exposed during investigations into malware, ransomware, and phishing attacks.

HYAS Protect

SentinelOne Singularity

Combining the strengths of SentinelOne’s industry leading analysis of endpoint behavior and HYAS’s unrivaled knowledge of threat actor infrastructure improves the security posture of any organization. Stealthy malware beaconing home, threat actors exfiltrating data or users going to phishing sites get detected by HYAS Protect, all with using the SentinelOne Agents’ telemetry data. No need to deploy resolvers or another agent.

HYAS Protect

Splunk Enterprise

This SIEM uses advanced security analytics, machine learning, and threat intelligence to give administrators more visibility into their networks. By combining the service with HYAS Insight and/or HYAS Protect, administrators can run queries through either integrated product via an included dashboard or search commands.

HYAS Insight

Splunk Enterprise

HYAS Protect

Splunk SOAR

Splunk SOAR provides end-to-end network visibility by monitoring network traffic and analyzing data using AI and machine learning. With this information, users can take actionable steps to address issues as soon as they crop up. When paired with HYAS Insight, you can undertake investigative actions that query HYAS Insight records to detect threat indicators. The addition of a HYAS Protect integration can then be used to provide verdicts on the maliciousness of specific indicators.

HYAS Insight

Splunk SOAR

HYAS Insight

ThreatConnect TIP

ThreatConnect and HYAS empower your security and intelligence teams to easily visualize threat intelligence in a single interactive platform, investigate threats in real time, and efficiently deliver the finished intelligence you need.

HYAS Insight

ThreatQuotient

HYAS Insight integrates with ThreatQuotient’s ThreatQ platform to enhance security operations with advanced infrastructure intelligence. Enrich your ThreatQ environment with HYAS adversary infrastructure, malware intelligence, and real-time verdicts that boost existing visualization, scoring, and other features across ThreatQ’s Threat Library. The result is the ability to quickly identify, prioritize, and investigate emerging threats more effectively. This integration empowers teams to focus on the most critical threats, streamline workflows, and respond faster to mitigate risks.