Agent catalog

Autonomous triage verdicts for Microsoft Sentinel, powered by HuntStack follow-up hunts

Every HuntStack incident gets a true-positive, false-positive, or needs-analyst verdict with next steps — unattended, before an analyst opens it.

• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Security Copilot
• HuntStack

Learn more →

Lockbase EXposure Agent — cut the standing attack paths across identity and high-impact exposure, before they're exploited.

Surface the standing, reducible escalation-path preconditions across identity and high-impact exposure — standing privilege, over-broad grants, stale access edges, exploitable assets — that you can right-size, harden, or retire to shrink attack surface before an attacker uses them. Every finding comes with its risk level, the escalation path, and the specific reduction action.

• Microsoft Security Copilot
• Microsoft Defender XDR
• Microsoft Entra ID
• Microsoft Defender for Identity
• Microsoft Intune
• Microsoft Secure Score

Learn more →

Lockbase Open XDR — Cross-EDR Investigation Coach for Microsoft Security Copilot

Investigate alerts in CrowdStrike Falcon and Microsoft Defender for Endpoint side by side, inside Security Copilot.

• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• Microsoft Defender Threat Intelligence
• Microsoft Security Copilot

Learn more →