Default Version 2.1.5
July 21, 2026
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3
Rating
0(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#4 in Investigative
This app provides free investigative actions
Supported actions
- test connectivity: This action will run the test domain to check the connectivity with the threat crowd server and this action will not affect any other actions irrespective of the connectivity result
- lookup domain: Queries ThreatCrowd for domain info
- lookup email: Queries ThreatCrowd for email info
- lookup ip: Queries ThreatCrowd for IP info
- file reputation: Queries ThreatCrowd for file reputation
Categories
Investigative
Created by
Splunk LLC
Source code
Type
connector
Downloads
30,646
Splunk Answers
Resources
Log in to report this app listing.