Technical Add-on for Malwarebytes
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The Add-on for Malwarebytes provides custom Splunk configuration to understand Malwarebytes event data. This app is a requirements for all Malwarebytes apps for Splunk. The app includes Common Information Compliant (CIM) field extractions and pre-defined source types for multiple Malwarebytes products making it compatible with all CIM based Splunk apps including Splunk Enterprise Security. It is a pre-requisite for all other Malwarebytes Splunk apps.
Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security management and making response effective. Malwarebytes makes endpoints resilient, so that you can protect, remediate, and regain control of your digital business.
Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security management and making response effective. Malwarebytes makes endpoints resilient, so that you can protect, remediate, and regain control of your digital business.
Overview: Use this Malwareabytes Technical Add-On app for every Malwarebytes integration with Splunk. This app allows conversion of Malwarebytes data to CIM compliant format to communicate with all Splunk apps.
Installation Guides: Technical Add-on for Malwarebytes
Customer FAQ Here
Contact Support: Here
Products Supported: Malwarebytes Incident Response and Malwarebytes Endpoint Protection
Authors: Malwarebytes
Release Notes
Version 0.9.37
April 3, 2019
- Various bug fixes and improvements
Version 0.9.361
Feb. 6, 2019
0.9.361
- Added support for Splunk Cloud
- Various bug fixes and improvements