IronDefense App for Splunk

NOTE: IronDefense Add-on for Splunk is required for this app to function. Download the latest version here: https://splunkbase.splunk.com/app/6267/ IronDefense is a Network Detection & Response (NDR) platform that improves visibility across the threat landscape and amplifies detection efficacy within your network environment, allowing your SOC team to be more efficient and effective with existing cyber defense tools, resources, and analyst capacity. IronDefense works closely with IronNet’s IronDome platform delivers the unique ability to automate real-time knowledge sharing and collaboration between and beyond sectors for faster threat detection. The IronDefense Splunk App gives your SOC team: - Enhanced visibility: Real-time insights across industry threatscapes, human insights to detected threats, and higher-order analysis of anomalies correlated across groups of peers via IronDome Collective Defense integration. - Faster detection: Advanced network behavioral analysis that leverages proven AI/ML and analytics used to defend highly secure networks, allowing the ability to scale up analysis to the largest enterprises. - Increased efficiency: Experienced insights — a “second pair of eyes” — from some of the nation’s top defenders, applied via IronDefense’s Expert System to supplement limited cyber staff and to enable faster, more effective prioritization and mitigation/response. --- For more information about IronNet's IronDefense NDR platform, visit: https://www.ironnet.com/irondefense For more information about IronNet's IronDome Collective Defense capability, visit: https://www.ironnet.com/irondome