Abnormal Security

This app integrates with Abnormal Security to support various generic and investigative actionsBuilt by Splunk LLC

Default Version 1.0.9

August 4, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3

Rating

(0)

Support

Splunk Supported

Ranking

#26 in Endpoint

This app integrates with Abnormal Security to support various generic and investigative actions

Supported actions

test connectivity: Validate the asset configuration for connectivity using supplied configuration
list threats: Fetch the list of threat IDs which are in threat log
get threat details: List threat details with the given threat ID
list abuse mailboxes: Fetch the list of abuse mailbox IDs
update threat status: Change the status of threat with given threat ID
get threat status: Fetch the status of threat