Dragos OT Add-On for Splunk

The Dragos OT Add-On bridges the IT/OT divide by bringing OT cybersecurity data from the Dragos Platform and Dragos WorldView into Splunk Enterprise Security. This integration brings a set of Dragos capabilities into Splunk, enhancing visibility of OT environments by providing complete asset discovery, threat detection, and vulnerability management as well as enabling effective incident response. This provides users in-depth and context rich ICS/OT asset visibility that analyzes multiple data sources including protocols, network traffic, data historians, host logs, asset characterizations, and anomalies to provide unmatched visibility of your ICS/OT environment. In addition to the Add-On's ability to provide visibility into your OT environment, it can also connect to Dragos WorldView to download Indicators of Compromise (IOCs) and integrate them into Splunk Enterprise Security's Threat Intelligence framework for streamlined threat intelligence.