Skip to main content
Warning
This app is archived. App archiving documentation
TA_Loki app icon

TA_Loki

Loki scanner is one of the famous yara rule scanner which have multiple usage in Incident Response and searching the environment for any indication of compromise. we decided to get benefit of Splunk capability and automate the scan activity from Splunk by creating addon to install it on agents and Application to help threat hunter and the analyst to review the result of scan more effectivelyBuilt by baha mahmoud
splunk product badge

Default Version 1.0.0

April 13, 2022

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(9)

Log in to rate this app

Support
Archived Add-on

Loki scanner is one of the famous yara rule scanner which have multiple usage in Incident Response and searching the environment for any indication of compromise. we decided to get benefit of Splunk capability and automate the scan activity from Splunk by creating addon to install it on agents and Application to help threat hunter and the analyst to review the result of scan more effectively