Skip to main content
Splunk Attack Analyzer Connector for Splunk SOAR app icon

Splunk Attack Analyzer Connector for Splunk SOAR

This connector integrates with the Splunk Attack Analyzer platform to reduce the friction of repetitive manual tasks typically associated with investigating threatsBuilt by Splunk LLC
soar product badge
Default Version 2.2.6

August 25, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#15 in Investigative

This connector integrates with the Splunk Attack Analyzer platform to reduce the friction of repetitive manual tasks typically associated with investigating threats

Supported actions

  • get job screenshots: Get screenshots for the specified job and store them in the vault
  • get pdf report: Get the PDF report for a completed job
  • get ai malware analysis: Get the ai malware analysis for a completed job
  • get job forensics: Get the consolidated forensics for a completed job
  • get job summary: Get a job summary for a submitted job
  • list recent jobs: Get a list of recent jobs
  • detonate file: Submit File for Scanning
  • detonate url: Submit New URL for Scanning
  • get system tags: Retrieve system tags for a specific job
  • on poll: Callback action for the on_poll ingest functionality
  • test connectivity: Validate the asset configuration for connectivity using supplied configuration