Splunk SOAR (f.k.a. Phantom)

Send files from SOAR to Server

Arty
Loves-to-Learn Lots

Is there an application to send SOAR files to a server?

Labels (2)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@Arty yes but it depends how you want to send. 

E.g. The SSH App does have the ability to send files. I suspect there are other apps that can too but you would need to check the actions list on splunkbase, or if you have access to a SOAR platform you can type the action name in the top-left search field, such as "put file" and then select `apps` and it will show you apps with the action.

 

I saw SSH/HTTP/Windows when i checked so there should be plenty of options. 

phanTom_0-1696848772394.png

 

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @Arty .. 

>> an application to send SOAR files to a server? 

to a "server", meaning outside regular user server ?!?! 

is it part of the SOAR playbook tasks, you mean?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...