Skip to main content
ALTIA-CSIRT Splunk app icon

ALTIA-CSIRT Splunk

ALTIA-CSIRT Splunk is an application that automates the deployment of a specialized set of security alerts focused on protecting the Splunk platform itself. It provides continuous monitoring of authentication events, configuration changes, privilege escalations, and anomalous activities within the Splunk environment. By enabling rapid detection of potential misuse or compromise of the SIEM infrastructure, this solution safeguards the integrity, availability, and confidentiality of the organization’s core security analytics platform, reinforcing trust in Splunk as the backbone of security operations.Built by Ciberseguridad Altia
splunk product badge
Default Version 1.0.0

October 23, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3

CIM Version: 6.x

Rating
0
(0)

Log in to rate this app

Support
Developer Supported

ALTIA-CSIRT Splunk is an application that automates the deployment of a specialized set of security alerts focused on protecting the Splunk platform itself. It provides continuous monitoring of authentication events, configuration changes, privilege escalations, and anomalous activities within the Splunk environment. By enabling rapid detection of potential misuse or compromise of the SIEM infrastructure, this solution safeguards the integrity, availability, and confidentiality of the organization’s core security analytics platform, reinforcing trust in Splunk as the backbone of security operations.