Latest Version 2.0.12
August 1, 2025
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
NetWitness Endpoint
This app supports executing various endpoint-based investigative and containment actions on RSA NetWitness Endpoint
Built by
Compatibility
Not Available
Platform Version: 7.0, 6.4, 6.3, 6.2, 6.1, 6.0, 5.5, 5.4, 5.3, 5.2, 5.1
Rating
0
(0)
Log in to rate this app
Support
Splunk Supported connector
Ranking
#19
in Endpoint
This app supports executing various endpoint-based investigative and containment actions on RSA NetWitness Endpoint
Supported Actions
- test connectivity: Validate credentials provided for connectivity
- blocklist domain: Blocklist the domain
- blocklist ip: Blocklist the IP
- list endpoints: Lists all the windows endpoints configured on NetWitness Endpoint
- get system info: Get information about an endpoint
- scan endpoint: Scan an endpoint
- get scan data: Get scan data of an endpoint
- on poll: Action to ingest endpoint related information
- list ioc: List the IOC
- get ioc: Get the IOC
Categories
Created By
Splunk LLC
Source Code
Type
connector
Downloads
26,424
Licensing
Splunk Answers
Resources
Log in to report this app listing