SEKOIA-IO · squioc · Jan 29, 2026 · Jan 29, 2026 · sourcery-ai · Jan 29, 2026
diff --git a/Checkpoint/checkpoint/CHANGELOG.md → Checkpoint/checkpoint-ngfw/CHANGELOG.md b/Checkpoint/checkpoint/CHANGELOG.md → Checkpoint/checkpoint-ngfw/CHANGELOG.md
diff --git a/Checkpoint/checkpoint/_meta/fields.yml → Checkpoint/checkpoint-ngfw/_meta/fields.yml b/Checkpoint/checkpoint/_meta/fields.yml → Checkpoint/checkpoint-ngfw/_meta/fields.yml
diff --git a/Checkpoint/checkpoint-ngfw/_meta/logo.png b/Checkpoint/checkpoint-ngfw/_meta/logo.png
diff --git a/Checkpoint/checkpoint-ngfw/_meta/manifest.yml b/Checkpoint/checkpoint-ngfw/_meta/manifest.yml
@@ -0,0 +1,9 @@
+uuid: f0a10c21-37d1-419f-8671-77903dc8de69
+name: Check Point NGFW
+slug: checkpoint-firewall
+description: "Check Point NGFWs are sophisticated security equipments.\nSending your firewall logs, especially the allowed events, to Sekoia.io will help you discovering potential network security threats."
-description: "Check Point NGFWs are sophisticated security equipments.\nSending your firewall logs, especially the allowed events, to Sekoia.io will help you discovering potential network security threats."
+description: "Check Point NGFWs are sophisticated security equipment.\nSending your firewall logs, especially the allowed events, to Sekoia.io will help you discover potential network security threats."
-description: "Check Point NGFWs are sophisticated security equipments.\nSending your firewall logs, especially the allowed events, to Sekoia.io will help you discovering potential network security threats."
+description: "Check Point NGFWs are sophisticated security equipment.\nSending your firewall logs, especially the allowed events, to Sekoia.io will help you discover potential network security threats."
+data_sources:
+  Network device logs: Check Point NGFW can record traffic events flowing through their firewall.
+  Network protocol analysis: Check Point NGFW does traffic analysis at physical/data/transport layers
+  Web logs: Domain names are extracted from HTTP traffic
+automation_module_uuid: af67e28c-fff0-489f-ac3c-a556e44a5cf5
diff --git a/.../checkpoint/_meta/smart-descriptions.json → ...kpoint-ngfw/_meta/smart-descriptions.json b/.../checkpoint/_meta/smart-descriptions.json → ...kpoint-ngfw/_meta/smart-descriptions.json
diff --git a/Checkpoint/checkpoint/ingest/parser.yml → Checkpoint/checkpoint-ngfw/ingest/parser.yml b/Checkpoint/checkpoint/ingest/parser.yml → Checkpoint/checkpoint-ngfw/ingest/parser.yml
@@ -1,4 +1,4 @@
-name: cef
+name: checkpoint-ngfw
 ignored_values: ["-"]
 pipeline:
   - name: checkpoint

diff --git a/Checkpoint/checkpoint/tests/CEF.json → Checkpoint/checkpoint-ngfw/tests/CEF.json b/Checkpoint/checkpoint/tests/CEF.json → Checkpoint/checkpoint-ngfw/tests/CEF.json
diff --git a/...ckpoint/tests/CEF_ApplicationControl.json → ...nt-ngfw/tests/CEF_ApplicationControl.json b/...ckpoint/tests/CEF_ApplicationControl.json → ...nt-ngfw/tests/CEF_ApplicationControl.json
diff --git a/Checkpoint/checkpoint/tests/CEF_accept.json → ...int/checkpoint-ngfw/tests/CEF_accept.json b/Checkpoint/checkpoint/tests/CEF_accept.json → ...int/checkpoint-ngfw/tests/CEF_accept.json
diff --git a/Checkpoint/checkpoint/tests/CEF_allow.json → ...oint/checkpoint-ngfw/tests/CEF_allow.json b/Checkpoint/checkpoint/tests/CEF_allow.json → ...oint/checkpoint-ngfw/tests/CEF_allow.json
diff --git a/...int/checkpoint/tests/CEF_cs2_2_times.json → ...heckpoint-ngfw/tests/CEF_cs2_2_times.json b/...int/checkpoint/tests/CEF_cs2_2_times.json → ...heckpoint-ngfw/tests/CEF_cs2_2_times.json
diff --git a/Checkpoint/checkpoint/tests/CEF_decrypt.json → ...nt/checkpoint-ngfw/tests/CEF_decrypt.json b/Checkpoint/checkpoint/tests/CEF_decrypt.json → ...nt/checkpoint-ngfw/tests/CEF_decrypt.json
diff --git a/Checkpoint/checkpoint/tests/CEF_drop.json → ...point/checkpoint-ngfw/tests/CEF_drop.json b/Checkpoint/checkpoint/tests/CEF_drop.json → ...point/checkpoint-ngfw/tests/CEF_drop.json
diff --git a/Checkpoint/checkpoint/tests/CEF_drop_1.json → ...int/checkpoint-ngfw/tests/CEF_drop_1.json b/Checkpoint/checkpoint/tests/CEF_drop_1.json → ...int/checkpoint-ngfw/tests/CEF_drop_1.json
diff --git a/.../checkpoint/tests/CEF_geo_protection.json → ...kpoint-ngfw/tests/CEF_geo_protection.json b/.../checkpoint/tests/CEF_geo_protection.json → ...kpoint-ngfw/tests/CEF_geo_protection.json
diff --git a/...nt/checkpoint/tests/CEF_https_bypass.json → ...eckpoint-ngfw/tests/CEF_https_bypass.json b/...nt/checkpoint/tests/CEF_https_bypass.json → ...eckpoint-ngfw/tests/CEF_https_bypass.json
diff --git a/...heckpoint/tests/CEF_network_protocol.json → ...oint-ngfw/tests/CEF_network_protocol.json b/...heckpoint/tests/CEF_network_protocol.json → ...oint-ngfw/tests/CEF_network_protocol.json
diff --git a/...point/checkpoint/tests/CEF_proxy_src.json → .../checkpoint-ngfw/tests/CEF_proxy_src.json b/...point/checkpoint/tests/CEF_proxy_src.json → .../checkpoint-ngfw/tests/CEF_proxy_src.json
diff --git a/Checkpoint/checkpoint/tests/CEF_reject.json → ...int/checkpoint-ngfw/tests/CEF_reject.json b/Checkpoint/checkpoint/tests/CEF_reject.json → ...int/checkpoint-ngfw/tests/CEF_reject.json
diff --git a/Checkpoint/checkpoint/tests/CEF_syslog.json → ...int/checkpoint-ngfw/tests/CEF_syslog.json b/Checkpoint/checkpoint/tests/CEF_syslog.json → ...int/checkpoint-ngfw/tests/CEF_syslog.json
diff --git a/...oint/checkpoint/tests/CEF_tcp_accept.json → ...checkpoint-ngfw/tests/CEF_tcp_accept.json b/...oint/checkpoint/tests/CEF_tcp_accept.json → ...checkpoint-ngfw/tests/CEF_tcp_accept.json
diff --git a/...oint/checkpoint/tests/CEF_user_agent.json → ...checkpoint-ngfw/tests/CEF_user_agent.json b/...oint/checkpoint/tests/CEF_user_agent.json → ...checkpoint-ngfw/tests/CEF_user_agent.json
diff --git a/...heckpoint/tests/Generic_icmp_decrypt.json → ...oint-ngfw/tests/Generic_icmp_decrypt.json b/...heckpoint/tests/Generic_icmp_decrypt.json → ...oint-ngfw/tests/Generic_icmp_decrypt.json
diff --git a/...t/checkpoint/tests/Generic_tcp_allow.json → ...ckpoint-ngfw/tests/Generic_tcp_allow.json b/...t/checkpoint/tests/Generic_tcp_allow.json → ...ckpoint-ngfw/tests/Generic_tcp_allow.json
diff --git a/...nt/checkpoint/tests/Generic_tcp_drop.json → ...eckpoint-ngfw/tests/Generic_tcp_drop.json b/...nt/checkpoint/tests/Generic_tcp_drop.json → ...eckpoint-ngfw/tests/Generic_tcp_drop.json
diff --git a/Checkpoint/checkpoint/tests/Syslog.json → Checkpoint/checkpoint-ngfw/tests/Syslog.json b/Checkpoint/checkpoint/tests/Syslog.json → Checkpoint/checkpoint-ngfw/tests/Syslog.json
diff --git a/Checkpoint/checkpoint/tests/Syslog_icmp.json → ...nt/checkpoint-ngfw/tests/Syslog_icmp.json b/Checkpoint/checkpoint/tests/Syslog_icmp.json → ...nt/checkpoint-ngfw/tests/Syslog_icmp.json
diff --git a/Checkpoint/checkpoint/tests/Syslog_key.json → ...int/checkpoint-ngfw/tests/Syslog_key.json b/Checkpoint/checkpoint/tests/Syslog_key.json → ...int/checkpoint-ngfw/tests/Syslog_key.json
diff --git a/Checkpoint/checkpoint/tests/Syslog_nat.json → ...int/checkpoint-ngfw/tests/Syslog_nat.json b/Checkpoint/checkpoint/tests/Syslog_nat.json → ...int/checkpoint-ngfw/tests/Syslog_nat.json
diff --git a/Checkpoint/checkpoint/_meta/logo.png b/Checkpoint/checkpoint/_meta/logo.png
diff --git a/Checkpoint/checkpoint/_meta/manifest.yml b/Checkpoint/checkpoint/_meta/manifest.yml