Recorded Future Receives Splunk Certification

December 1, 2016 • Nagraj Seshadri

Security operations center (SOC) teams can detect threats with speed and confidence.

We’re thrilled to announce that our Recorded Future add-on for Splunk Enterprise Security (ES) has been certified by Splunk.

The add-on automatically creates notable events based on Recorded Future threat intelligence and enriches IOC (indicators of compromise) information to dramatically increase your speed-to-no verdicts and rapidly understand true incidents in context. Get started by downloading our certified add-on for Splunk ES from Splunkbase.

Dramatically increase your speed-to-no verdicts.

SOC teams are inundated with alerts and events. Threat intelligence from Recorded Future creates clarity by adding rich context. We surface and deliver threat intelligence analyzed from external sources, helping you make informed verdicts. SOC analysts can efficiently dismiss false-positives and capture threat context for true incidents.

Detect important incidents in your network that you would otherwise have missed.

Recorded Future identifies indicators with elevated risk by analyzing web reporting, threat lists, and our own novel methods. And unlike basic IP reputation lists, we deliver rich context so you can selectively apply IOCs that match your security needs in event correlation and detection rules.

Threat intelligence provider to Splunk’s Adaptive Response Initiative.

Recorded Future has also partnered with Splunk for its Adaptive Response Initiative, which provides greater integration with Splunk ES. If you have Splunk ES 4.5 (or higher), you can:

• Use Adaptive Response actions to connect with Recorded Future manually or through automated processes.
• Enrich IOCs from any notable event with context from Recorded Future.
• View enrichment information in a custom dashboard.

Customers gain quantifiable value.

Recorded Future’s real-time threat intelligence enables our customers to increase both their security and productivity. For example, with the support of Recorded Future, leading healthcare provider St. Jude Medical experienced:

• 63% reduction on exploit kit traffic delivered via malvertising into the network.
• 28x better detection of botnet traffic.
• 50% savings in analyst time for malicious IOC investigation.

See it in action.

To see how your security operations can benefit from Recorded Future, request a tailored demo.