Splunk Enterprise and Enterprise Security
Enriquece Splunk con inteligencia.
Harness the power of Recorded Future’s Intelligence Graph to immediately view complete context on threats from adversaries and intent, to the infrastructure they build, to the organizations they target, without ever leaving your Splunk environment.
Why Recorded Future?
Recorded Future helps you to understand adversaries and their intent, what tools they are using, and who they are targeting. The Recorded Future Intelligence Graph:
- Collects and structures adversary and victim data from text, imagery, and technical sources
- Uses analytics to discover, analyze, and map associations across billions of entities in real time
- Includes critical insights from our global team of world-class analysts
- Delivers insights optimized for both user and technology workflows
Access robust intelligence directly in Splunk, with a Recorded Future integration, to prioritize responses to threats and decrease time spent manually conducting research.
Robust Out-of-the-Box Functionality
Detectar amenazas
Access correlation dashboards out-of-the-box, enabling security teams to identify threats in their environment with the Recorded Future risk score provided directly within the dashboard.
Prioritize the most critical alerts in your environment with Recorded Future dashboards that:
- Correlate Recorded Future risk lists with events in your Splunk environment
- Identify the most critical threats by bringing in risk scores that hit a minimum level, eliminating non-critical events from the dashboard
triage alertas
Access robust intelligence inside of Splunk with enrichment functionalities, either through ad hoc lookup or by pivoting from the correlation dashboard. The Recorded Future integration for Splunk provides similar information from an Intelligence Card, so analysts never have to leave the Splunk platform to access everything they need to know about an IP, domain, hash, URL, CVE, or malware. Within these pages analysts can access risk scores, risk rules, evidence for severity, technical links including MITRE ATT&CK mapping, and insights from our analyst group, Insikt.
Trae Recorded Future alertas a Splunk
Use the Recorded Future alerting dashboard to view and triage your Recorded Future alerts right in Splunk. All alerts set up in Recorded Future can be accessed and viewed in Splunk. Recorded Future alerts cover a wide spectrum of use cases including: typosquat detection, brand mentions on sensitive sources, and critical vulnerabilities related to your technology stack, trending malware and threat actors related to specific industries.
Características
Technical Links
Technical Links
Visualize and pivot through evidence-based relationships between indicators to better understand adversaries and their methods
Map to MITRE ATT&CK Framework
Map to MITRE ATT&CK Framework
Entiende TTPs adversariales y TTPs se emplea con información etiquetada para agilizar las investigaciones directamente dentro de Splunk
Professional Services Engagements
Professional Services Engagements
Colabora con nuestro equipo de servicios profesionales para desarrollar soluciones para casos de uso personalizados, incluyendo paneles de control personalizados, alertas o listas de riesgos, ingestión de detalles de alertas e integraciones con nuestros módulos de terceros y Identity Intelligence .
Use case specific correlation dashboards
Use case specific correlation dashboards
Recorded Future ofrece listas de amenazas que contienen COI relacionadas con casos de uso específicos. Estas listas de amenazas pueden usar para correlacionar con registros y feeds en Splunk y así identificar amenazas relacionadas con prioridades de seguridad del cliente. Los casos de uso incluyen: detección de malware, detención de Node TOR, detección de ataques de fuerza bruta y más.
Free trial
Interested in exploring how you can use Recorded Future’s integration with your Splunk environment to accelerate threat detection and response? Recorded Future now offers a 30-day free trial with Splunk Enterprise or Enterprise Security. Sign up today to gain access to:
- A comprehensive view of your threat landscape with an unprecedented quantity and variety of sources from the open and dark web, as well as exclusive technical sources
- Real-time risk scores and context on IPs, domains, URLs, hashes, and malware for faster alert triage
- High-confidence, out-of-the-box risk lists for detection of previously undetected threats
- Dashboards