Default Version 1.5.0
November 7, 2024
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 8.x, 6.x, 5.x
Rating
3(2)
Log in to rate this app
Support
Not Supported
Cognito Stream: network metadata with an opinion Deliver scalable, security-enriched network metadata to feed custom detection and response tools - Actionable network data in Zeek format - Embedded with data science-derived security insights - Associates network metadata with unique host attributes Security-enriched metadata - Hundreds of metadata attributes collected from cloud to enterprise - Embedded machine learning-derived security insights - Conduct investigations based on hosts, not IP addresses Low-touch Zeek deployments - Presented in a compact, easy-to-understand Zeek format - Requires no performance tuning or ongoing maintenance - More than five times the performance of self-managed deployments https://www.vectra.ai/product/cognito-stream Splunk integration with Vectra Solutions Sheet: https://content.vectra.ai/rs/748-MCE-447/images/ProductIntegration_2017_Integrating_Cognito_with_Splunk_English.pdf Cognito Stream Solutions Sheet: https://content.vectra.ai/rs/748-MCE-447/images/ProductCompanyOverview_2019_Cognito_Stream_Network_metadata_with_an_opinion_English.pdf
Categories
Security, Fraud & Compliance
Created by
Vectra AI
Type
app
Downloads
2,295
Splunk Answers
Resources
Log in to report this app listing.