Welcome to the new Splunkbase! To return to the old Splunkbase, .
Phantom app icon

Phantom

This App exposes various Phantom APIs as actions

Built by
soar product badge

Latest Version 3.8.4
October 6, 2025
Compatibility
Not Available
Platform Version: 7.1, 7.0, 6.4, 6.3
Rating

0

(0)

Log in to rate this app
Support
Phantom support icon
Splunk Supported connector
Ranking

#2

in Information
This App exposes various Phantom APIs as actions

Supported Actions

  • test connectivity: Validate the asset configuration for connectivity
  • update artifact: Update or overwrite Phantom artifact with the provided input
  • add note: Add a note to a container
  • update artifact tags: Add/Remove tags from an artifact
  • find artifacts: Find artifacts containing a CEF value
  • add listitem: Add value to a custom list
  • find listitem: Find value in a custom list
  • add artifact: Add a new artifact to a container
  • deflate item: Deflates an item from the vault
  • export container: Export local container to the configured Phantom asset
  • import container: Import a container from an external Phantom instance
  • create container: Create a new container on a Phantom instance
  • get action result: Find the results of a previously run action
  • update list: Update a list
  • no op: Wait for the specified number of seconds

Categories

Created By

Splunk LLC

Source Code

Type

connector

Downloads

34,553

Licensing

Splunk Answers

Resources

Log in to report this app listing