Skip to main content
Darktrace for Splunk SOAR app icon

Darktrace for Splunk SOAR

This app integrates with Darktrace to perform investigative and containment actionsBuilt by SOAR Community
soar product badge
Default Version 1.0.9

June 29, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1, 6.0, 5.5, 5.4, 5.3

Rating
0
(0)

Log in to rate this app

Support
Developer Supported

This app integrates with Darktrace to perform investigative and containment actions

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using the supplied configuration
  • get device tags: Receive all of the tags that are currently applied to a device
  • get tagged devices: Receive all of the devices that currently have a given tag
  • get breach comments: Receive all comments made on a model breach
  • on poll: Ingests Darktrace model breaches and Cyber AI Analyst investigations
  • get device description: Receive device description for the specified device
  • get device modelbreaches: Receive recent model breaches for the specified device
  • acknowledge breach: Acknowledge a model breach
  • unacknowledge breach: Unacknowledge a model breach
  • post comment: Post a comment to a model breach
  • post tag: Post a tag to a device
  • get breach connections: Receive connections involved in a model breach