Dragos Threat Intelligence App for Splunk (Deprecated)

The Dragos Threat Intelligence App for Splunk enables users to automatically correlate and visualize Indicators of Compromise (IOCs) from Dragos Threat Intelligence (WorldView) subscriptions with your log data in Splunk to detect early warning of malicious activities in incoming and outgoing traffic, domains, and applications in IT networks targeting ICS/OT environments. A set of customizable dashboards provide search results for log data compliant with the Splunk Common Information Model (CIM). This app requires the Dragos Add-on for Splunk.