Skip to main content
Phantom app icon

Phantom

This app integrates with the Phantom platform to perform investigative and containment actionsBuilt by Splunk LLC
soar product badge

Default Version 5.0.0

August 15, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6

Rating
1
(1)

Log in to rate this app

Support
Splunk Supported
Ranking

#2 in Information

This app integrates with the Phantom platform to perform investigative and containment actions

Supported actions

  • test connectivity: test connectivity
  • add artifact: Add an artifact to a container
  • add listitem: Add a new row to a list
  • add note: Add a note to a container
  • create container: Create a new container
  • deflate item: Deflate a compressed item in the vault, adding the deflated items back to the vault
  • export container: Export a container from this Phantom instance to another Phantom instance
  • find artifacts: Find all artifacts that have a certain value
  • find listitem: Find a value in a custom list
  • get action result: Find the results of a previously run action
  • import container: Import a container from another Phantom instance to this Phantom instance
  • make request: make request
  • no op: Performs no action, and can be used to introduce a configurable delay in a playbook
  • update artifact tags: Add/remove tags from an artifact
  • update artifact: Update an artifact
  • update list: Update rows in an existing list