Malwarebytes Agentless Remediation
Splunk AppInspect Passed
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The Malwarebytes Remediation App provides a new way to remediate infected endpoints using the Malwarebytes agentless Breach Remediation tool. This app offers automated and on-demand remediation of Windows endpoints through custom Splunk alert actions. You will need to configure a service account to deploy the dissolvable agent.
Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security managing and making response effective. Malwarebytes makes endpoints resilient, so that we can protect, remediate and regain control of our digital lives.
Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security managing and making response effective. Malwarebytes makes endpoints resilient, so that we can protect, remediate and regain control of our digital lives.
Overview: Use this Malwareabytes Agentless Remediation App to initiate scan and removal of malware when needed. The endpoint agent is an .exe file that leaves no footprint on the device.
Requirements: Malwarebytes Technical Add-on for Splunk
Installation Guides:
Malwarebytes Agentless Remediation app for Splunk Enterprise
Customer FAQ: Here
Video: Integrating Splunk with Malwarebytes Breach Remediation
Contact Support: Here
Products Supported: Malwarebytes Breach Remediation
Authors: Malwarebytes
Release Notes
Version 1.0.0
Jan. 6, 2020
- Now supports Splunk 8 and 7.x