Skip to main content
Warning
This app is archived. App archiving documentation
TA for Microsoft Windows Defender app icon

TA for Microsoft Windows Defender

Microsoft Windows Defender TA for Splunk®. Contains inputs and extractions for use with Splunk. Also contains mapping to the Malware CIM, particularly useful for use with Splunk Enterprise Security.Built by Patrick O'Connell
splunk product badge

Default Version 1.0.8

December 9, 2021

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 4.x, 3.x

Rating
4
(3)

Log in to rate this app

Support
Archived Add-on

Microsoft Windows Defender TA for Splunk®. Contains inputs and extractions for use with Splunk. Also contains mapping to the Malware CIM, particularly useful for use with Splunk Enterprise Security.