Splunk SOAR

Send files from SOAR to Server

Arty
Loves-to-Learn Lots

Is there an application to send SOAR files to a server?

Labels (2)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@Arty yes but it depends how you want to send. 

E.g. The SSH App does have the ability to send files. I suspect there are other apps that can too but you would need to check the actions list on splunkbase, or if you have access to a SOAR platform you can type the action name in the top-left search field, such as "put file" and then select `apps` and it will show you apps with the action.

 

I saw SSH/HTTP/Windows when i checked so there should be plenty of options. 

phanTom_0-1696848772394.png

 

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @Arty .. 

>> an application to send SOAR files to a server? 

to a "server", meaning outside regular user server ?!?! 

is it part of the SOAR playbook tasks, you mean?

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...