Dataminr CTTI for Splunk Enterprise and Splunk Cloud

Intelligence tailored to you, inside Splunk Dataminr Client-Tailored Threat Intelligence (CTTI) for Splunk Enterprise and Splunk Cloud delivers threat intelligence shaped to your organization, your sector, and your attack surface directly into Splunk. Alerts and cyber entities arrive normalized and ready to correlate, so your security operations center (SOC) can detect, prioritize, and respond where it already works. The app collects alerts and cyber entities from the Dataminr CTTI Public API and maps them to the Splunk Common Information Model (CIM). Purpose-built dashboards give SOC, threat intelligence, vulnerability, and risk teams a clear view of what matters. For Splunk Enterprise Security (ES) customers, CTTI alerts become risk-scored notables, CTTI indicators feed ES threat intelligence, and analysts get live Dataminr context on a notable when they need it.