DarkStrata Threat Intelligence Add-on for Splunk

**DarkStrata Threat Intelligence Add-on for Splunk** brings DarkStrata's credential-exposure intelligence directly into Splunk and Splunk Enterprise Security (ES), so your SOC can detect and respond to compromised credentials before they're used against you. DarkStrata continuously monitors breach data, infostealer/malware logs and third-party exposure for credentials tied to your organisation. This add-on pulls that intelligence into Splunk as structured, CIM-compliant events — ready for correlation, alerting, dashboards and automated response. Use it to: - **Detect compromised credentials** before they're used maliciously - **Identify malware infections** through infostealer credential detection - **Monitor third-party risk** by tracking corporate credentials exposed on external sites - **Automate incident response** via ES notable events, correlation searches and adaptive-response actions - **Enrich threat hunting** with credential-exposure context Data is delivered in **STIX 2.1** format and mapped to the **Authentication** and **Threat Intelligence** CIM data models, so it works out of the box with Enterprise Security's threat-intelligence framework. Collection is incremental and checkpoint-based — only new intelligence is fetched on each run — with configurable batching, rate limiting and connection pooling for predictable performance.