Where this collector family fits
These collectors add network-control, internet-access, email-security, and selected extended-detection signals to Nova. They are useful when an evaluation needs to follow activity across users, destinations, messages, and security controls.
- Network activity investigation
- Secure internet-access review
- Email-threat investigation
- Security-control alert context
Supported collectors in this family
Nova currently implements 10 collectors in this family. Each entry names the source and the customer outcome it supports.
- Check Point Security Logs
- Brings Check Point Security Logs activity into Nova for security monitoring, investigation, and audit review.
- Cisco Umbrella Logs
- Brings Cisco Umbrella Logs activity into Nova for security monitoring, investigation, and audit review.
- Cloudflare Logs
- Brings Cloudflare Logs activity into Nova for security monitoring, investigation, and audit review.
- Fortinet Security Logs
- Brings Fortinet Security Logs activity into Nova for security monitoring, investigation, and audit review.
- Mimecast Email Security
- Brings Mimecast Email Security activity into Nova for security monitoring, investigation, and audit review.
- Netskope Events
- Brings Netskope Events activity into Nova for security monitoring, investigation, and audit review.
- Palo Alto Cortex XDR Alerts
- Brings Palo Alto Cortex XDR Alerts security signals into Nova for triage, investigation, prioritization, and response review.
- Proofpoint Email Security
- Brings Proofpoint Email Security activity into Nova for security monitoring, investigation, and audit review.
- Zscaler Internet Access Logs
- Brings Zscaler Internet Access Logs activity into Nova for security monitoring, investigation, and audit review.
- Zscaler Private Access Logs
- Brings Zscaler Private Access Logs activity into Nova for security monitoring, investigation, and audit review.
How the evidence supports customer work
Nova keeps collected data linked to its source as it is used for asset inventory, cloud security, detection, investigation or Threat Hunting. Collecting data does not by itself prove a threat or authorize a response action.
Source coverage is not assumed to be complete. Nova keeps collection health, freshness, gaps, and partial results visible so teams can judge whether the evidence is suitable for the decision at hand.
Questions to answer during evaluation
- Which named sources are required for the use case, and which are optional context?
- What history, accounts, subscriptions, organizations, projects, or devices are available to the source product?
- What delay, volume, and missing-data conditions are acceptable for the intended decision?
- Which customer team owns source access, data interpretation, and ongoing health review?