Skip to main content
ZeroFox app icon

ZeroFox

ZeroFox Alerts for Splunk SOARBuilt by SOAR Community
soar product badge
Default Version 3.6.4

July 20, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1

Rating
0
(0)

Log in to rate this app

Support
Not Supported

ZeroFox Alerts for Splunk SOAR

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • on poll: Callback action for the on_poll ingest functionality
  • take action: Take action on a ZeroFox an alert
  • tag alert: Add or remove a tag to a ZeroFox alert
  • threat submission: Add a manual threat to ZeroFox
  • lookup alert: Retrieve a single alert and it's details, identified by its unique integer identifier
  • modify notes: Append or replace notes on ZeroFox alert