Previdian

Previdian for Splunk brings sensor-led exploitation intelligence into the searches you already run. It polls the Previdian Pro or Enterprise API, keeps a CVE lookup you can join to scanner findings, and indexes Watch notifications when the threat changes. Enterprise customers can also index raw observations and attacker infrastructure.Built by Ryan Dewhurst

Default Version 1.0.0

September 25, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 8.x

Rating

(0)

Support

Developer Supported

Early warning in Splunk when vulnerabilities move into active exploitation. Join scanner findings to sensor observations, confidence, and KEV status.