Aside from Alerts for Admins& Meta Woot! &MC what other Splunk apps are useful for daily chores & Ransomware monitoring?

[SamHTexas]

Am looking for top 5-10 Splunk Apps / TAs to help with daily security checks & Watching for UBA behaviors, Ransomware monitoring etc. Thank u in advance

[General_Talos]

This may be subjective 🤣, anyways can be a good discussion

- Splunk Enterprise Security

- InfoSec App for Splunk

- Splunk ES Content Update

- Splunk Security Essentials for Ransomware

[SamHTexas]

Thank u for this list. We have ES (Enterprise Security). Is Ent. security update a different app? Let me know if you think of more apps / TAs. Thank u again

[General_Talos]

Yes, Splunk ES content update is different app

https://splunkbase.splunk.com/app/3449/

+1

SA-Investigator for Enterprise Security :  https://splunkbase.splunk.com/app/3749/