Material Security Add-on for Splunk

Material Security Add-on for Splunk brings Material Security “Issue” alerts into Splunk via HTTP Event Collector and automatically maps them to the CIM Change, Email, and Risk data models. With normalized fields and tags out of the box, SOC and IR teams can search, correlate, and act on Google Workspace–centric threats alongside the rest of their security data in seconds.