Splunk SOAR

Splunk SOAR
Community Activity
leomeyerovich
When looking at the result of a Phantom automation, say on IP1 & IP2 + User1 & User2, we'd like to also have a table ...
by leomeyerovich Explorer in Splunk SOAR 01-31-2020
0 0
0
0
buzz_gt
Question: Are there any locking or concurrency guarantees when playbooks are operating on a container? Issue I am try...
by buzz_gt New Member in Splunk SOAR 01-31-2020
0 0
0
0
flogo
Hello, I'm using the QRadar integration on Phantom, and we can define the mapping between Phantom and QRadar.I got an...
by flogo New Member in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and remediate phishing emails?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to hunt for threats?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to protect an EC2 group from malicious traffic?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to determine if an IP address is malicious?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to automatically contain malicious insiders?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and remediate malware infections?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to prompt an analyst to block an endpoint?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and contain ransomware?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
stevenaung
Hi all, I was testing out phanom to contain malicious IPs with my perimeter FWs.The problem is that it only block as ...
by stevenaung New Member in Splunk SOAR 01-29-2020
0 0
0
0
kyung123a
Event coming from QRadar is missing artifact. What should I check? If you need mapping,How do I map between phantom a...
by kyung123a New Member in Splunk SOAR 01-28-2020
0 0
0
0
waleksandrowski
I have a problem with integration of Phantom with RSA Netwitness. When I try to test connectivity with "RSA Security ...
by waleksandrowski New Member in Splunk SOAR 01-15-2020
0 0
0
0
divya1388
Hi, I have registered for the community edition of Phanthom on 01/13/2020. I have not received any email regarding re...
by divya1388 Explorer in Splunk SOAR 01-14-2020
0 2
0
2
4A616D6573
Hi, I've setup the Phantom App for Splunk and API is connected successfully. So far I've set up some test Saved Searc...
by 4A616D6573 Explorer in Splunk SOAR 01-10-2020
0 4
0
4
maxywalker1
We currently use Cofense Report Phishing to provide users with the ability to report potential phishing emails. When ...
by maxywalker1 Explorer in Splunk SOAR 01-07-2020
0 3
0
3
salexander8
Is there any timeline for support in Splunk 8.Having installed the latest version available - 2.7.5 I just get an 'In...
by salexander8 Engager in Splunk SOAR 01-07-2020
0 1
0
1
adil13
I have registered for Splunk Phantom Community edition for but I have not received any response. Is there anybody can...
by adil13 New Member in Splunk SOAR 12-22-2019
0 2
0
2
ansusabu
While starting the Phantom server we are receiving the following error: "psql: ERROR: pgbouncer cannot connect to ser...
by ansusabu Communicator in Splunk SOAR 12-16-2019
0 3
0
3
johnteo
Hi guys I have been trying to make a alarm ring every time the playbook executes. However, when trying to do it with ...
by johnteo Explorer in Splunk SOAR 12-16-2019
0 10
0
10
johnteo
Hi guys, is there a way to trigger a customizable sound as part of the Phantom Playbook whenever it runs automaticall...
by johnteo Explorer in Splunk SOAR 12-11-2019
0 1
0
1
AlexBryant
I have written a custom code block that outputs URLs of files on the Internet that I'd like Phantom to download and u...
by AlexBryant Path Finder in Splunk SOAR 12-10-2019
0 4
0
4
geoffsheppard
Hi, I am just curious if anyone knows how to check on the completion status of a child playbook. For example: Playb...
by geoffsheppard New Member in Splunk SOAR 11-20-2019
0 1
0
1
johnteo
For all of the playbooks I have executed and tried to test in the past 24 hours, none of them have successfully execu...
by johnteo Explorer in Splunk SOAR 11-17-2019
0 6
0
6