Menlo Security HEAT Analyzer

Overview

Details

HEAT attacks are a class of cyber threats targeting web browsers as the attack vector and employs techniques to evade detection by multiple layers in current security stacks including firewalls, Secure Web Gateways, sandbox analysis, URL Reputation, and phishing detection. HEAT attacks are used to deliver malware or to compromise credentials, which in many cases leads to ransomware attacks
The Menlo Security HEAT Analyzer Splunk App analyzes log data to identify HEAT attacks that evade URL reputation tools. These attacks are called Legacy URL Reputation Evasion (LURE) attacks.

Two-minute video on HEAT : https://www.menlosecurity.com/blog/two-minutes-onhighly-evasive-adaptive-threats-heat/

Blog on HEAT : https://www.menlosecurity.com/blog/too-hot-to-handle-why-modern-work-has-given-rise-to-heat-attacks/

White paper on HEAT by ESG Research : https://info.menlosecurity.com/The-rise-of-Highly-Evasive-Adaptive-Threats-HEAT.html

Note: vetting of the HEAT Analyzer by the SplunkBase Support team for compatibility with Splunk Cloud is currently in process.

Release Notes

Version 1.0.0

April 29, 2022

Downloads

Share Subscribe

Version

Built by

Menlo Security

Support

Developer Supported

Contact Developer Questions on Splunk Answers Flag as inappropriate

Compatibility

Products: Splunk Enterprise, Splunk Cloud

Splunk Versions: 9.0, 8.2, 8.1

Platform: Platform Independent

CIM Versions: 5.x, 4.x

Licensing

Splunk End User License for Third Party Content

Category & Contents

Categories: IT Operations, Security, Fraud & Compliance

App Type: App

Subscribe Share

My Account

Support & Services