Skip to main content
Warning
This app is archived. App archiving documentation
Cyber Triage app icon

Cyber Triage

This add-on integrates Cyber Triage to allow you to collect and analyze endpoint data using Cyber Triage. It will send an agentless collection tool to the remote endpoint, retrieve volatile and file system data, and analyze it for evidence of an intrusion. You can then import the Cyber Triage result back into splunk.Built by Basis Technology
splunk product badge
Default Version 1.2.0

November 16, 2022

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 5.x, 4.x

Rating
5
(2)

Log in to rate this app

Support
Archived Add-on

This add-on integrates Cyber Triage to allow you to collect and analyze endpoint data using Cyber Triage. It will send an agentless collection tool to the remote endpoint, retrieve volatile and file system data, and analyze it for evidence of an intrusion. You can then import the Cyber Triage result back into splunk.