Splunk SOAR

Splunk SOAR
Community Activity
kwells0479
We have been working on getting an installation of phantom running in a centos:7 docker container using rpm, but are...
by kwells0479 Explorer in Splunk SOAR 02-13-2020
0 4
0
4
dphegarty
I have a top level playbook that calls two playbooks, on that does some analysis and the second one that promotes the...
by dphegarty New Member in Splunk SOAR 02-07-2020
0 1
0
1
leomeyerovich
We have a python script that basically does "ip address -> ... python-generated splunk calls + viz api calls -> url o...
by leomeyerovich Explorer in Splunk SOAR 01-31-2020
0 0
0
0
leomeyerovich
When looking at the result of a Phantom automation, say on IP1 & IP2 + User1 & User2, we'd like to also have a table ...
by leomeyerovich Explorer in Splunk SOAR 01-31-2020
0 0
0
0
buzz_gt
Question: Are there any locking or concurrency guarantees when playbooks are operating on a container? Issue I am try...
by buzz_gt New Member in Splunk SOAR 01-31-2020
0 0
0
0
flogo
Hello, I'm using the QRadar integration on Phantom, and we can define the mapping between Phantom and QRadar.I got an...
by flogo New Member in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and remediate phishing emails?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to hunt for threats?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to protect an EC2 group from malicious traffic?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to determine if an IP address is malicious?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to automatically contain malicious insiders?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and remediate malware infections?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to prompt an analyst to block an endpoint?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
sloshburch
Does anyone have examples of how to use Splunk Phantom to investigate and contain ransomware?
by sloshburch Ultra Champion in Splunk SOAR 01-30-2020
0 1
0
1
stevenaung
Hi all, I was testing out phanom to contain malicious IPs with my perimeter FWs.The problem is that it only block as ...
by stevenaung New Member in Splunk SOAR 01-29-2020
0 0
0
0
kyung123a
Event coming from QRadar is missing artifact. What should I check? If you need mapping,How do I map between phantom a...
by kyung123a New Member in Splunk SOAR 01-28-2020
0 0
0
0
waleksandrowski
I have a problem with integration of Phantom with RSA Netwitness. When I try to test connectivity with "RSA Security ...
by waleksandrowski New Member in Splunk SOAR 01-15-2020
0 0
0
0
divya1388
Hi, I have registered for the community edition of Phanthom on 01/13/2020. I have not received any email regarding re...
by divya1388 Explorer in Splunk SOAR 01-14-2020
0 2
0
2
4A616D6573
Hi, I've setup the Phantom App for Splunk and API is connected successfully. So far I've set up some test Saved Searc...
by 4A616D6573 Explorer in Splunk SOAR 01-10-2020
0 4
0
4
maxywalker1
We currently use Cofense Report Phishing to provide users with the ability to report potential phishing emails. When ...
by maxywalker1 Explorer in Splunk SOAR 01-07-2020
0 3
0
3
salexander8
Is there any timeline for support in Splunk 8.Having installed the latest version available - 2.7.5 I just get an 'In...
by salexander8 Engager in Splunk SOAR 01-07-2020
0 1
0
1
adil13
I have registered for Splunk Phantom Community edition for but I have not received any response. Is there anybody can...
by adil13 New Member in Splunk SOAR 12-22-2019
0 2
0
2
ansusabu
While starting the Phantom server we are receiving the following error: "psql: ERROR: pgbouncer cannot connect to ser...
by ansusabu Communicator in Splunk SOAR 12-16-2019
0 3
0
3
johnteo
Hi guys I have been trying to make a alarm ring every time the playbook executes. However, when trying to do it with ...
by johnteo Explorer in Splunk SOAR 12-16-2019
0 10
0
10
johnteo
Hi guys, is there a way to trigger a customizable sound as part of the Phantom Playbook whenever it runs automaticall...
by johnteo Explorer in Splunk SOAR 12-11-2019
0 1
0
1
Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...
Top Solution Authors