This is the latest Splunk App for FireEye designed to work with Splunk 8.x.
Supported FireEye Appliances are:
- Detection On Demand (DOD)
- Network Threat Prevention Platform ( NX Series )
- Email Threat Prevention Platform (EX Series)
- Cloud Email Threat Prevention Platform (ETP)
- Forensic Analysis Platform (AX Series)
- Content Threat Prevention Platform (FX Series)
- Endpoint Threat Prevention Platform (HX Series)
- Network Forensics Platform (PX Series)
- Threat Analytics Platform (TAP)
- (Supports pulling alerts and incidents - cannot update records yet)
Supported protocols and formats is:
JSON over HTTPS
Categories
IT Operations, Security, Fraud & Compliance
Resources
Log in to report this app listing