Splunk Tech Talks
Deep-dives for technical practitioners.

Splunk Phantom App Building the Easy Way

melissap
Splunk Employee
Splunk Employee

View our Tech Talk: Security Edition, Splunk Phantom App Building the Easy Way 

(view in My Videos)

Splunk Phantom apps provide a way to extend the Phantom platform by adding connectivity to third party security technologies in order to run actions. Given the broad set of technologies that can be orchestrated during cyber response, apps allow users and partners to add their own custom functionality within Phantom. Apps are written in Python, and in order to automate successfully, you must have at least one person that understands how apps work, how to troubleshoot an app, how to modify an app, and how to build a new app from scratch. 

This talk will walk you through the open source Phantom Test Harness you can use to greatly simplify the Phantom App building/testing process. 

Contributors
Get Updates on the Splunk Community!

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...