Sniffa NDR Application for Splunk

This Splunk® Application is used by Incident Responders and Threat Hunters to View and Correlate Alert logs generated by the Sniffa Sensor Manager, Snort® and Suricata IDS with the high-fidelity transaction logs produced by the Open Source network security tool called Zeek (formerly known as Bro). This application is designed to compliment a subscription to the Sniffa Sensor Manager Application and ingest logs from Sniffa-built Sensors, however it can be used to ingest logs from any Open Source Zeek sensors if configured appropriately.