Symantec DeepSight Security Intelligence App for Splunk Enterprise

Monitor cyber threats and malicious activities in your network with the Symantec DeepSight Security Intelligence App for Splunk Enterprise. By correlating data sources in your Splunk environment to flagged threats from Symantec’s datafeeds, you will have visibility into any risks posed against your data in real time. Take control of your network and fight cyber crime with the Symantec DeepSight Security Intelligence App for Splunk Enterprise. The technology add-on for this app is currently only available for RedHat 6.x and CentOS 6.x. We will expand the functionality of the TA to other operating systems in future releases. Features: - Get information about the current threats posed against your data - Drilldown on specific events to see recurring threats - A geographical breakdown of malicious IP addresses per country level - A graphical representation of IP/URL threats over time - Analyze the hostility, reputation, and confidence value of any given harmful IP/URL data against DeepSight