Latest Version 2.1.3
August 1, 2025
Warning
Splunkbase Classic has been deprecated and will be deactivated on February 18, 2026.
ThreatCrowd
This app provides free investigative actions
Built by
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3
Rating
0
(0)
Log in to rate this app
Support
Splunk Supported connector
Ranking
#4
in Investigative
This app provides free investigative actions
Supported Actions
- test connectivity: This action will run the test domain to check the connectivity with the threat crowd server and this action will not affect any other actions irrespective of the connectivity result
- lookup domain: Queries ThreatCrowd for domain info
- lookup email: Queries ThreatCrowd for email info
- lookup ip: Queries ThreatCrowd for IP info
- file reputation: Queries ThreatCrowd for file reputation
Categories
Investigative
Created By
Splunk LLC
Source Code
GitHub(Opens new window)Type
connector
Downloads
28,171
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing