Latest Version 2.1.2
April 19, 2024
Warning
Splunkbase Classic has been deprecated and will be deactivated on February 18, 2026.
Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-On
Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-on provides a mechanism to map data from the Cisco AMP for Endpoints Event Input App for CIM compliant applications. The add-on also provides additional workflow actions so security analysts can go straight from Splunk Events to the Cisco AMP for Endpoints console.
Built by
Compatibility
Splunk Enterprise
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0
CIM Version: 4.x
Rating
0
(0)
Log in to rate this app
Support
Not Supported
Ranking
#18
in Investigative
#32
in Endpoint
Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-on provides a mechanism to map data from the Cisco AMP for Endpoints Event Input App for CIM compliant applications. The add-on also provides additional workflow actions so security analysts can go straight from Splunk Events to the Cisco AMP for Endpoints console.
Categories
Endpoint, Investigative
Created By
Cisco AMPPortal
Type
addon
Downloads
4,806
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing