Threat Intel Enrichment AI App for Splunk

This Splunk App enriches Indicators of Compromise (IOCs) (IPs, domains, URLs, file hashes) by querying multiple external threat intelligence sources, then correlates enriched IOCs into campaigns. A key feature of this app is its use of AI‑driven natural language generation to produce clear, human‑readable IOC summaries and campaign summaries, making threat intelligence more accessible to both analysts and decision‑makers.