Splunk Tech Talks
Deep-dives for technical practitioners.

Splunk Phantom App Building the Easy Way

melissap
Splunk Employee
Splunk Employee

View our Tech Talk: Security Edition, Splunk Phantom App Building the Easy Way 

(view in My Videos)

Splunk Phantom apps provide a way to extend the Phantom platform by adding connectivity to third party security technologies in order to run actions. Given the broad set of technologies that can be orchestrated during cyber response, apps allow users and partners to add their own custom functionality within Phantom. Apps are written in Python, and in order to automate successfully, you must have at least one person that understands how apps work, how to troubleshoot an app, how to modify an app, and how to build a new app from scratch. 

This talk will walk you through the open source Phantom Test Harness you can use to greatly simplify the Phantom App building/testing process. 

Contributors
Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...