splunk
Technical Add-on for Malwarebytes
Splunk Cloud
Overview
Details
The Add-on for Malwarebytes provides custom Splunk configuration to understand Malwarebytes event data. This app is a requirements for all Malwarebytes apps for Splunk. The app includes Common Information Compliant (CIM) field extractions and pre-defined source types for multiple Malwarebytes products making it compatible with all CIM based Splunk apps including Splunk Enterprise Security. It is a pre-requisite for all other Malwarebytes Splunk apps.
Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security management and making response effective. Malwarebytes makes endpoints resilient, so that you can protect, remediate, and regain control of your digital business.
Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security management and making response effective. Malwarebytes makes endpoints resilient, so that you can protect, remediate, and regain control of your digital business.
Overview: Use this Malwarebytes Technical Add-On app for every Malwarebytes integration with Splunk. This app allows conversion of Malwarebytes data to CIM compliant format to communicate with all Splunk apps.
Installation Guides: Technical Add-on for Malwarebytes
Customer FAQ Here
Contact Support: Here
Products Supported: Malwarebytes Incident Response and Malwarebytes Endpoint Protection
Authors: Malwarebytes
Release Notes
Version 2.1.0
July 28, 2022
- Added Vulnerabilities Input
- Added OS Patches Input
-
Added Device Control Input
-
Please contact Malwarebytes support for any urgent query.
Version 2.0.4
Feb. 16, 2022
- Bug Fixes and Improvements
- Suspicious Activities Input Improvements
- Added new Jobs Input (Works with MBCR App)
- New light version of Endpoints Input
-
Updated UI
-
Please contact Malwarebytes support for any urgent query.
Version 2.0.3
Oct. 8, 2021
- Bug Fixes and Improvements
- Added Proxy Settings
- Please contact Malwarebytes support for any urgent query
Version 2.0.2
Aug. 27, 2021
- Splunk Cloud Support
- Migration from syslog only to API first integration
- Still supports syslog as a legacy feature
- Supports both Splunk 7 and Splunk 8 versions
- Additional tweaks and enhancements to the stability
- Bug Fixes and Improvements
- Fix for event mismatches with nebula.
- Please contact Malwarebytes support for any urgent query
Version 1.0.1
Aug. 24, 2020
- Added Usage Analytics Setup Screen
- Various Bug fixes and Improvements
Version 0.9.37
April 3, 2019
- Various bug fixes and improvements