-
DEVICE INTEGRATION
- Palo Alto (Device Integration)
- Dell Cylance Endpoint
- McAfee Web Gateway
- Imperva WAF
- Darktrace
- Forescout CounterACT
- Juniper Cortex Threat
- Zscaler
- Sophos
- Sophos Endpoint
- Trend Micro
- Sophos Cyberoam Firewall
- Radware-WAF
- NetScaler WAF
- Ubuntu
- Juniper SRX
- Forcepoint Websense
- FireEye
- Forcepoint DLP
- F5 BIG-IP ASM
- CyberArk PIM
- CheckPoint
- Bluecoat Proxy
- Accops Hyworks
- Barracuda WAF Syslog
- Forwarding F5 Distributed Cloud Services Logs to DNIF over TLS
- JIRA CLOUD
- Aruba ClearPass
- Show Remaining Articles (13) Collapse Articles
-
CONNECTORS
-
- 1Password Connector
- Abnormal Security
- Akamai Netstorage
- Atlassian
- Auth0 Connector
- AWS CloudTrail
- AWS Kinesis
- AWS S3
- AWS S3 (Optimized)
- AWS S3 Optimized Cross Account Connector
- Azure Blob Storage Connector
- Azure Event Hub
- Azure NSG
- Beats
- Box
- Cisco Duo
- Cloudflare Logpull Connector Setup Guide
- CloudWatch Connector
- Cortex XDR
- CrowdStrike
- Cyble Vision
- Device42
- Dropbox Connector
- GCP
- GCP PUB/SUB
- GitHub
- Google Workspace
- Haltdos
- HTTP Connector
- Hub Spot Connector
- Indusface
- Jira Connector
- Microsoft Graph Security API
- Microsoft Intune
- Mimecast
- Netflow
- Netskope Connector
- Network Traffic Analysis
- NextDLP Reveal
- Office 365
- Okta
- OneLogin
- Orca
- PICO Legacy Connector
- Prisma Alerts
- Prisma Incidents
- Salesforce
- Salesforce Pub/Sub Connector
- Shopify Connector
- Slack
- Snowflake
- Snyk Connector
- Syslog
- TCP
- Tenable Vulnerability Management Connector
- TLS
- Trend Micro Audit Logs
- Workday HCM Connector
- Zendesk
- Zoom
- Jumpcloud Connector
- Sophos connector
- Tenable Security Center Connector
- AWS GuardDuty Connector
- Trend Micro Vision One Connector
- RediffMail Pro Connector
- Microsoft Sentinel
- Microsoft Exchange Online Connector
- Show Remaining Articles (53) Collapse Articles
-
-
DATA INGESTION
-
HUNTING WITH WORKBOOKS
-
- Your first FIND with the HYPERCLOUD
- Create a Search Block
- Create a Signal Block
- Create a Text Block
- Create an Outlier Block
- Create a DQL Block
- Create an SQL Block
- Create a Code Block
- Create a Visual Block
- Create a Call Block
- Create a Return Block
- Create a Notification Block
- Schedule a Workbook
- Native Workbook
- Workbook Functions
- How to view Workbooks?
- Add Parameters to Workbook
- Working with Pass through Content
- How to create a Workbook?
- Workbooks
- Show Remaining Articles (5) Collapse Articles
-
-
DNIF Query Language (DQL Language)
-
SECURITY MONITORING
- Streamline Alert Analysis with Signal Tagging
- Workbook Versioning: Track, Collaborate, and Restore with Ease
- What is Security Monitoring?
- Creating Signal Suppression Rules
- Why EBA
- Signal Suppression Rule
-
- What are signals?
- View Signal Context Details
- Suspect & Target
- Source Stream
- Signal Filters
- Signal Data export
- Signal Context Details
- Signal Confidence Levels
- Raise and View Signals
- Investigate Anywhere
- How to add a signal to a case?
- Graph View for Signals
- Global Signals
- False Positives
- Add Multiple Signals to a Case
- Add comment to the signal
- Show Remaining Articles (1) Collapse Articles
-
OPERATIONS
-
MANAGE DASHBOARDS
-
MANAGE REPORTS
-
USER MANAGEMENT & ACCESS CONTROL
-
BILLING
-
MANAGING YOUR COMPONENTS
-
GETTING STARTED
-
INSTALLATION
-
SOLUTION DESIGN
-
AUTOMATION
-
- Active Directory
- AlienVault
- Asset Store
- ClickSend
- Domain Tools
- Fortigate
- GreenSnow
- JiraServiceDesk
- Microsoft Teams Channel
- New Relic
- Opsgenie
- PagerDuty
- Palo Alto
- ServiceNow
- Slack Configuration
- TAXII
- Trend Micro
- URLhaus
- User Store
- Virustotal
- Webhook
- Show Remaining Articles (6) Collapse Articles
-
-
TROUBLESHOOTING AND DEBUGGING
-
- TLS ( Troubleshooting Procedure)
- TCP (Troubleshooting Procedure)
- Syslog (Troubleshooting Procedure)
- Salesforce ( Troubleshooting Procedure)
- PICO
- Office 365 (Troubleshooting Procedure)
- GSuite
- GCP (Troubleshooting Procedure)
- Beats (Troubleshooting Procedure)
- Azure NSG ( Troubleshooting Procedure)
- Azure Eventhub
- AWS S3 (Troubleshooting Procedure)
-
-
LICENSE MANAGEMENT
-
RELEASE NOTES
- November 27, 2025 - Application Update
- October 28, 2025 - Content Update
- August 20, 2025 - Content Update
- August 5, 2025 - Application Update
- July 15, 2025 - Content Update
- June 13, 2025 - Content Update
- May 21, 2025 - Content Update
- April 17, 2025- Content Update
- March 25, 2025- Content Update
- March 18, 2025 - Application Update
- March 5, 2025 - Application Update
- January 27, 2025 - Application Update
- January 29, 2025 - Content update
- December 30, 2024 - Content Update
- December 12, 2024 - Content Update
- December 3, 2024 - Application Update
- November 15, 2024 - Content Update
- October 26, 2024- Application Update
- October 23, 2024 - Content Update
- October 16, 2024 - Application Update
- September 04, 2024 - Application Update
- September 04, 2024 - Content Update
- August 27, 2024 - Application Update
- July 30, 2024 - Application Update
- June 04, 2024- Application Update
- April 24, 2024- Application Update
- March 26, 2024 - Application Update
- February 19, 2024 - Application Update
- January 09, 2024 - Content Update
- January 09, 2024 - Application Update
- November 27, 2023 - Content Update
- November 27, 2023 - Application Update
- October 05, 2023 - Application Update (Release Notes v9.3.3)
- May 30, 2023 - Application Update (Release Notes v9.3.2)
- November 29, 2022 - Application Update (Release Notes v9.3.0)
- Show Remaining Articles (20) Collapse Articles
-
API
-
POLICIES
-
SECURITY BULLETINS
-
BEST PRACTICES
-
DNIF AI
-
DNIF LEGAL AND SECURITY COMPLIANCE
Salesforce
Salesforce is a customer relationship management solution that brings companies and customers together.
Salesforce connector pulls the event monitoring data that contains information useful for assessing organisation usage trends and user behavior.
Prerequisites
- Connectivity with salesforce API using valid credentials
- Required credentials:
- Username
- Password
- Consumer key
- Consumer secret
- Security token
- Instance URL
Steps to setting up salesforce account
CREATE A CONNECTED APP
Follow below steps to create a connected app
- Login to Salesforce Administrator account.

- Click on the setup icon on the navigation bar.
- Navigate to the Platform Tools tab on the left panel.
- Navigate to Apps > App Manager.

- Click New Connected App.
- Fill out the necessary fields, select Enable OAUTH settings checkbox
- Enter value for callback url
- Select Manage user data via APIs (api) and Perform requests at any time (refresh_token, offline_access) in Selected OAuth Scopes column
- Uncheck Require Secret for Refresh Token Flow checkbox

- Click Save.
- Navigate to Platform Tools > Apps > App Manager.
- Navigate to your created connected app and click on the arrow on the right side.

- Select view option from the menu.
- Navigate to API (Enable OAuth Settings) section, click on Manage Consumer Details button.

- Copy the values of the consumer key and consumer secret and keep it.

CREATE USER PROFILES
User profiles defines user’s access to objects and data, and tasks allowed to the user within the application.
Follow below steps to create user profile in salesforce:
- Login to salesforce administrator account.
- Click on the setup icon on the navigation bar.

- Navigate to ADMINISTRATION tab on left panel
- Navigate to Users > Profiles section
- Click on the new profile button

- Select existing profile as standard user
- Specify a name for the profile

- Click Save
- Now click on the edit button.
- Navigate to Connected App Access, select the connected apps you want to access using this profile.

- Navigate to Administrative Permissions, select API Enabled and Manage Users checkbox.

- Navigate to General User Permissions, select View Event Log Files checkbox.

- Click Save.
CREATE A USER IN SALESFORCE
Follow below steps to create user in salesforce:
- Login to salesforce administrator account.
- Click on the setup icon on the navigation bar.
- Navigate to the ADMINISTRATION tab on the left panel.
- Navigate to Users > Users.
- Click on the New User

- Fill out the necessary fields, select user license as Salesforce and select the profile we created in the previous step

- To obtain a user password, select the “Generate new password and notify the user immediately” checkbox.
- Click on save.
GET SECURITY TOKEN
Follow the steps to get a security token.
- Login to Salesforce using the Salesforce account to be used by the connector.
- Click the view profile section located in the upper right corner, then click Settings.

- In the right panel of the page, navigate to My Personal Information > Reset My Security Token.

- Click Reset Security Token.

- Token will be sent to you via email.
Configurations
The following are the configurations to forward Salesforce logs to DNIF.

| Field Name | Description |
| Connector Name | Enter a connector name |
| Connector Type | Enter salesforce_connector |
| Instance URL | Enter salesforce instance URL |
| Salesforce User | Enter salesforce username |
| Salesforce User Password | Enter salesforce user password |
| Consumer key | Enter salesforce Consumer key |
| Consumer secret | Enter salesforce Consumer secret |
| Security Token | Enter salesforce Security Token |
- Click Save after entering all the required details and click Test Connection, to test the configuration.
- A Connection successful message will be displayed on screen along with the time stamp.
- If the connection is not successful an error message will be displayed. Refer Troubleshooting Connector Validations for more details on the error message.
Once the connector is configured, validate if the connector is listed under Collection Status screen with status as Active. This signifies the connector is configured successfully and data is ready to ingest.
