BlackRidge TAC App for Splunk

The BlackRidge TAC App for Splunk provides identity attribution of unauthorized network connection attempts to Splunk Enterprise to enable the earliest possible detection by Splunk users of potential breaches and compromised or rogue insiders and third parties. The app comes with a predefined set of dashboards which provide ready-made graphs for popular syslog messages from BlackRidge TAC gateways. The key features of the BlackRidge TAC App for Splunk include: • Dashboards to visualize the Top 10 identity attribution events for the past day/week/month • Graphs of the top network security events including unauthorized access events • Email alerts with user identity of unauthorized connections attempts to protected resources