Symantec EDR App for Splunk

Symantec Endpoint Detection & Response (EDR) helps you to uncover, prioritize, investigate, remediate complex attacks across endpoint, email, network, and web from one console. Symantec EDR App for Splunk utilizes power of Splunk and provides you an aggregated as well as individual visualizations for Network, Endpoint and Email by collecting data from Symantec EDR and Symantec Email Security.cloud. This App contains the dashboard visualization and requires https://splunkbase.splunk.com/app/3454/ to provide the data. By clicking on the “Download” or “Install” button or using the licensed software, you agree to the terms and conditions of the Symantec Software License Agreement located at https://www.symantec.com/content/en/us/enterprise/eulas/splunk-app-eula-1-0.pdf. The administrator guide is available on http://www.symantec.com/docs/TECH239938