icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Technical Add-on for Malwarebytes
SHA256 checksum (technical-add-on-for-malwarebytes_202.tgz) 21dfc90aeba1d3dcd22a2c521fde9b5adbb2a1fa240a5bd84b1e1e71d49a8500 SHA256 checksum (technical-add-on-for-malwarebytes_101.tgz) cc317a1aa27ebff8139edd4e764a0d506924fe3c14301033b82df9e08a828e19 SHA256 checksum (technical-add-on-for-malwarebytes_0937.tgz) dce590ee18240fc9478c4884566cf70d700d516b430a8f4c3813756782f366a1
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate


Technical Add-on for Malwarebytes

Splunk Cloud
The Add-on for Malwarebytes provides custom Splunk configuration to understand Malwarebytes event data. This app is a requirements for all Malwarebytes apps for Splunk. The app includes Common Information Compliant (CIM) field extractions and pre-defined source types for multiple Malwarebytes products making it compatible with all CIM based Splunk apps including Splunk Enterprise Security. It is a pre-requisite for all other Malwarebytes Splunk apps.

Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security management and making response effective. Malwarebytes makes endpoints resilient, so that you can protect, remediate, and regain control of your digital business.

Overview: Use this Malwarebytes Technical Add-On app for every Malwarebytes integration with Splunk. This app allows conversion of Malwarebytes data to CIM compliant format to communicate with all Splunk apps.

Installation Guides: Technical Add-on for Malwarebytes

Customer FAQ Here

Contact Support: Here

Products Supported: Malwarebytes Incident Response and Malwarebytes Endpoint Protection

Authors: Malwarebytes

Release Notes

Version 2.0.2
Aug. 27, 2021
  • Splunk Cloud Support
  • Migration from syslog only to API first integration
  • Still supports syslog as a legacy feature
  • Supports both Splunk 7 and Splunk 8 versions
  • Additional tweaks and enhancements to the stability
  • Bug Fixes and Improvements
  • Fix for event mismatches with nebula.
  • Please contact Malwarebytes support for any urgent query
Version 1.0.1
Aug. 24, 2020
  • Added Usage Analytics Setup Screen
  • Various Bug fixes and Improvements
Version 0.9.37
April 3, 2019
  • Various bug fixes and improvements

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.