This app is archived. Learn more
This add-on integrates Cyber Triage to allow you to collect and analyze endpoint data using Cyber Triage. It will send an agentless collection tool to the remote endpoint, retrieve volatile and file system data, and analyze it for evidence of an intrusion. You can then import the Cyber Triage result back into splunk.
(0)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources