Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
Benni0 App for MISP
The main purpose of this Splunk App is the import of attributes/IOCs from MISP into a Splunk index. In order to use these IOCs for detection either as lookup or in Splunk Enterprise Security, the App provides some reports to generate IOC lookup-tables. These lookup-tables are compatible with the Threat Intelligence Framework of Splunk Enterprise Security.
Built by Benjamin Hollentin
Compatibility
Not Available
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
Rating
0
(0)
Log in to rate this app
The main purpose of this Splunk App is the import of attributes/IOCs from MISP into a Splunk index.
In order to use these IOCs for detection either as lookup or in Splunk Enterprise Security, the App provides some reports to generate IOC lookup-tables.
These lookup-tables are compatible with the Threat Intelligence Framework of Splunk Enterprise Security.
Categories
Created By
Benjamin Hollentin
Source Code
Type
app
Downloads
168
Licensing
Splunk Answers
Resources
Login to report this app listing