Skip to main content
NetWitness Endpoint app icon

NetWitness Endpoint

This app supports executing various endpoint-based investigative and containment actions on RSA NetWitness EndpointBuilt by Splunk LLC
soar product badge
Default Version 2.0.15

August 7, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#20 in Endpoint

This app supports executing various endpoint-based investigative and containment actions on RSA NetWitness Endpoint

Supported actions

  • test connectivity: Validate credentials provided for connectivity
  • blocklist domain: Blocklist the domain
  • blocklist ip: Blocklist the IP
  • list endpoints: Lists all the windows endpoints configured on NetWitness Endpoint
  • get system info: Get information about an endpoint
  • scan endpoint: Scan an endpoint
  • get scan data: Get scan data of an endpoint
  • on poll: Action to ingest endpoint related information
  • list ioc: List the IOC
  • get ioc: Get the IOC