RST Cloud Threat Database Add-on for Splunk

RST Cloud Threat Database Add-on allows to aggregate threat intelligence from multiple sources, store it locally in the Redis Database and quickly check a bunch of IP addresses against it. It makes possible to determine malicious IP addresses in the logs and use this information to analyse such activities. Features: - Automatically download IP reputation data and save in the Redis Database; - Predefined macros helps to enrich your log containing IP addresses; - A near real-time performance with an ability to process thousands of IPs at one time.