EchoTrail App for Splunk

EchoTrail provides data about how Windows processes behave in the wild. Using EchoTrail data you can enrich your security event data or endpoint process data, e.g. Sysmon events. You can also score process executions in your environment against what is normal and seen across many other environments.