Any suggesting how to integrate threat intelligence with Splunk?
Apps, blogs, articles, etc.
Search hash, domain, and ip information from VirusTotal, ThreatCrowd, TotalHash, PassiveTotal, and Censys.io
Centripetal Splunk App for Threat Intelligence
Anomali ThreatStream Community App
DomainTools App for Splunk
IP Analytics for Splunk
View solution in original post