topic Re: Aside from Alerts for Admins& Meta Woot! &MC what other Splunk apps are useful for daily chores & Ransom in Security

Aside from Alerts for Admins& Meta Woot! &MC what other Splunk apps are useful for daily chores & Ransomware monitoring?

SamHTexas — Mon, 05 Jul 2021 21:17:54 GMT

Am looking for top 5-10 Splunk Apps / TAs to help with daily security checks & Watching for UBA behaviors, Ransomware monitoring etc. Thank u in advance

Re: Aside from Alerts for Admins& Meta Woot! &MC what other Splunk apps are useful for daily chores & Ransom

General_Talos — Tue, 06 Jul 2021 03:00:34 GMT

This may be subjective 🤣, anyways can be a good discussion

- Splunk Enterprise Security

- InfoSec App for Splunk

- Splunk ES Content Update

- Splunk Security Essentials for Ransomware

Re: Aside from Alerts for Admins& Meta Woot! &MC what other Splunk apps are useful for daily chores & Ransom

SamHTexas — Fri, 09 Jul 2021 14:19:59 GMT

Thank u for this list. We have ES (Enterprise Security). Is Ent. security update a different app? Let me know if you think of more apps / TAs. Thank u again

Re: Aside from Alerts for Admins& Meta Woot! &MC what other Splunk apps are useful for daily chores & Ransom

General_Talos — Wed, 14 Jul 2021 11:42:34 GMT

Yes, Splunk ES content update is different app

https://splunkbase.splunk.com/app/3449/

SA-Investigator for Enterprise Security : https://splunkbase.splunk.com/app/3749/