At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk Enterprise Security, Splunk SOAR, and Splunk Attack Analyzer. We know just how eager the community has been to see these integrations come to fruition, so we’re thrilled to share that all of the integrations are live!
Now, Splunk Security (cloud) customers can directly leverage Cisco Talos’ invaluable threat intelligence through Cisco Talos Intelligence for Enterprise Security, the Cisco Talos Intelligence connector for Splunk SOAR, and as a globally enabled feature in Splunk Attack Analyzer — at no additional cost.
To learn more, read our blog “Harness the Power of Cisco Talos Threat Intelligence Across Splunk Security Products” and then check out the following:
- Cisco Talos Intelligence for Enterprise Security: Current Splunk Enterprise Security (cloud) customers can download the Cisco Talos Intelligence for Enterprise Security app from Splunkbase here and find additional guidance on leveraging the app’s capabilities here.
- Cisco Talos Intelligence connector for Splunk SOAR: The Cisco Talos Intelligence connector for Splunk SOAR is now pre-installed for all current Splunk SOAR (cloud) customers. Additional guidance on leveraging the connector’s capabilities is available here.
- Cisco Talos Intelligence in Splunk Attack Analyzer: These capabilities are globally enabled for all Splunk Attack Analyzer customers and don’t require any extra apps, connectors, or configuration. Check out this blog for additional details.
