Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
NetWitness Endpoint
This app supports executing various endpoint-based investigative and containment actions on RSA NetWitness Endpoint
Built by Splunk LLC
Compatibility
Not Available
Platform Version: 6.4, 6.3, 6.2, 6.1, 6.0, 5.5, 5.4, 5.3, 5.2, 5.1
Rating
0
(0)
Log in to rate this app
Ranking
#18
in Endpoint
This app supports executing various endpoint-based investigative and containment actions on RSA NetWitness Endpoint
Supported Actions
- test connectivity: Validate credentials provided for connectivity
- blocklist domain: Blocklist the domain
- blocklist ip: Blocklist the IP
- list endpoints: Lists all the windows endpoints configured on NetWitness Endpoint
- get system info: Get information about an endpoint
- scan endpoint: Scan an endpoint
- get scan data: Get scan data of an endpoint
- on poll: Action to ingest endpoint related information
- list ioc: List the IOC
- get ioc: Get the IOC
Categories
Created By
Splunk LLC
Source Code
Type
connector
Downloads
25,159
Licensing
Splunk Answers
Resources
Login to report this app listing