VH Enrichment App enriches Splunk events with external IP intelligence data.
The app continuously ingests enrichment data into a KV Store and enables dashboards and searches to automatically correlate events with enriched IP context.
It is designed for security teams who need fast visibility into potentially malicious IP activity directly within Splunk.
Categories
SIEM, Threat Intel
Resources
Log in to report this app listing