Splunk SOAR
Incident Response & Ticketing
Detection & Response Enablement
概要
Integrates OpenCTI Threat Intelligence Platform with Splunk SOAR for threat intelligence management and incident response
The OpenCTI Integration for Splunk SOAR bridges OpenCTI's threat intelligence platform with your security orchestration workflows. It enables analysts to enrich artifacts (IPs, domains, hashes, URLs), search and create STIX observables and indicators, manage threat entities (threat actors, malware, intrusion sets, campaigns, vulnerabilities), and handle cases (Incident, RFI, RFT) — all without leaving Splunk SOAR. Bulk operations and relationship creation keep your OpenCTI knowledge base in sync with active investigations.
基本情報
Filigran
Romain Guignard
サードパーティとの統合
Orchestration (SOAR)
2026年4月23日
6.9.0
0