The technical add-on allows CrowdStrike Intelligence customers to periodically retrieve Intelligence Indicator data from the CrowdStrike Intel Indicator API and ingest that data into their Splunk Environment. This enables organizations to leverage CrowdStrike's industry leading intelligence to provide proper security context to the rest of their machine data. This add-on also is used to support the CrowdStrike Falcon App (https://splunkbase.splunk.com/app/5094/).
(0)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources