Default Version 0.0.7
May 16, 2018
May 16, 2018
Splunk Enterprise
Log in to rate this app
Enables threat hunters to develop and deploy use cases against the Countercept Omni EDR data. This app is a foundation framework with examples of how to use the Omni EDR data and Splunk techniques to manage data loads and combined SPL to hunt for evil.
Log in to report this app listing.