Attack surface management using Splunk- Is there any way to achieve this?

[pm2012]

Hi,

Customer is looking for attack surface management using Splunk. Is there any way around to achieve this if yes how this could be achieved in terms of any app/add-on or 3rd party solution? Your answer would really be appreciated. Thanks in advance

[richgalloway]

What exactly is the customer looking for Splunk to do?  Which attack surface do they want to manage, Splunk's or some other one?  Keep in mind that Splunk is a monitor, not a manager, but there may be a solution (perhaps using SOAR) depending what the customer is trying to do.