Skip to main content
Warning
This app is archived. App archiving documentation
Countercept Omni EDR App for Splunk app icon

Countercept Omni EDR App for Splunk

Enables threat hunters to develop and deploy use cases against the Countercept Omni EDR data.Built by Chris Newman
splunk product badge

Default Version 0.0.7

May 16, 2018

Compatibility

Splunk Enterprise

Rating
0
(0)

Log in to rate this app

Support
Archived App

Enables threat hunters to develop and deploy use cases against the Countercept Omni EDR data. This app is a foundation framework with examples of how to use the Omni EDR data and Splunk techniques to manage data loads and combined SPL to hunt for evil.