Malwarebytes Cloud Remediation

Overview

Details

The Cloud Remediation app integrates Splunk Enterprise and Splunk Cloud to the Malwarebytes Cloud for interactions with Incident Response, Endpoint Protection, and Endpoint Protection and Response products.

Malwarebytes makes endpoints resilient through adaptive cyber protection, active threat response and orchestrated endpoint control that quickly restores workforce productivity when a compromise occurs. Our adaptive cyber protection predicts and detects attacks with multi-layer detection across the kill chain. We enable active threat response where machine learning is actionable and automated allowing for full recovery when a compromise occurs. We orchestrate command and control across siloed IT and Security organizations simplifying security management and making response effective. Malwarebytes makes endpoints resilient, so that you can protect, remediate, and regain control of your digital business.

Overview: Use this Malwarebytes Cloud Remediation app to initiate scan and removal of malware when needed through Malwarebytes Incident Response or provide real-time protection through Malwarebytes Endpoint Protection.

Requirements: Malwarebytes Technical Add-on for Splunk

Installation Guide: Malwarebytes Cloud Remediation app for Splunk

Customer FAQ: Here

Video: Integrating Splunk with Malwarebytes Cloud Console

Contact Support: Here

Products Supported: Malwarebytes Incident Response and Malwarebytes Endpoint Protection and and Malwarebytes Endpoint Protection and Response

Authors: Malwarebytes

Release Notes

Version 2.0.4

Feb. 16, 2022

Migrated Inputs to TA-Malwarebytes APP
Migrated Dashboard to TA-Malwarebytes APP
Simplified Setup process
Improved alerts actions

In current release, only remediation functionality is included. Please check documentation if you have any issues.

Please contact Malwarebytes support for any urgent query.

Version 1.3.2

Nov. 3, 2020

Bug Fixes and Improvements.

407

Downloads

Share Subscribe

Version

Built by

Julien Tortora

Support

Developer Supported

Contact Developer Questions on Splunk Answers Flag as inappropriate

App Contents: Alert Actions

Compatibility

This version of the app (1.3.2) is not available for Splunk Cloud. However, version 2.0.4 of this app is available for Splunk Cloud.

Products: Splunk Enterprise, Splunk Cloud

Products: Splunk Enterprise

Splunk Versions: 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0

Platform: Platform Independent

CIM Versions: 4.x

Splunk Versions: 9.0, 8.2, 8.1, 8.0, 7.3

Platform: Platform Independent

CIM Versions: 4.x, 3.x

Licensing

End User License Agreement for Third-Party Content

Category & Contents

Categories: IT Operations, Security, Fraud & Compliance

App Type: App

Subscribe Share

My Account

Support & Services