SpyCloud Application for Splunk

SpyCloud is the market leader in protecting enterprises and their customers from online fraud, account takeover, and follow-on attacks like ransomware. We provide an early warning of compromised credentials and malware-infected users, so you can take action before the criminals do. This application provides visualizations that allow the end user to view the SpyCloud data that is loaded by the SpyCloud Add-On for Splunk . Visualizations include a high level dashboard, a breakdown of breach records by the customer’s watchlist assets (domain, email and IP addresses,) and a summary of infected user data, including the ability to drill down into a specific machine infection to see all details for a given malware infection including sites visited, along with credential information. Note: This Application can display information loaded by the SpyCloud Add-On for Splunk found here: https://splunkbase.splunk.com/app/6373/