Splunk Enterprise Security

Splunk Add on for Microsoft ATP Endpoint: Which add-ons are CIM ready?

chidiuchegbu
Loves-to-Learn Everything

I have setup Microsoft defender for endpoint inputs with many add on but It looks as though most of the add on are not CIM ready for Endpoint and Malware Data model.

I have used  Microsoft 365 Defender Add-on for Splunk - https://splunkbase.splunk.com/app/4959/

Splunk Add-on for Microsoft Security - https://splunkbase.splunk.com/app/6207/#/overview

 

Which one is CIM ready?

 

 

 

I have used edr.JPG

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...