Latest Version 1.4.1
April 28, 2025
Warning
Splunkbase Classic has been deprecated and will be deactivated on February 18, 2026.
Sandfly Security
Sandfly Security app to gather information, initiate system scans and other actions on the Sandfly Server
Built by
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1, 6.0, 5.5
Rating
0
(0)
Log in to rate this app
Support
Not Supported
Sandfly Security app to gather information, initiate system scans and other actions on the Sandfly Server
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- scan host: Run a Sandfly investigation
- sandfly full investigation: Run a full Sandfly investigation
- sandfly process investigation: Run a Sandfly process investigation
- sandfly file investigation: Run a Sandfly file investigation
- sandfly directory investigation: Run a Sandfly directory investigation
- sandfly log tamper investigation: Run a Sandfly log tamper investigation
- sandfly user investigation: Run a Sandfly user investigation
- sandfly recon investigation: Run a Sandfly recon investigation
- list endpoints: List all the endpoints/sensors configured on the device
- get system info: Get information about an endpoint
- list users: List the user accounts on a machine
- list processes: List the running processes on a machine
Categories
Endpoint
Created By
SOAR Community
Source Code
sandflysecurity(Opens new window)Type
connector
Downloads
357
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing