Skip to main content
qorionix
Integration catalog

Cloud platforms

Available

Azure Activity Log

By Microsoft

Subscription-level control-plane and service health events from Azure Activity Log — who created, modified or deleted which resource, polled every five minutes and parsed into named fields.

Set up in Qorionix

What you can connect

Capabilities and availability

Each capability has its own setup and status. Review the details before enabling it for your organisation.

  • Log collection

    Available

    Setup available in the console

More in Cloud platforms

Available

Cloud platforms

AWS CloudTrail

Console sign-ins, IAM changes and every API call recorded by CloudTrail, pulled from the S3 bucket the trail writes to and parsed into named fields.

Log collection
View integration
Available

Cloud platforms

AWS IAM Identity Center

SAML 2.0 sign-in through AWS IAM Identity Center (formerly AWS SSO). SCIM user provisioning from Qorionix is not available.

SAML single sign-on
View integration
Available

Cloud platforms

Amazon GuardDuty

Imports GuardDuty findings — unauthorized API calls, compromised credentials, anomalous network behaviour — from a tenant's own AWS account into the Qorionix SIEM incident queue. Read-only: does not archive, suppress or resolve findings in AWS.

cloud alerts
View integration