Exposing rich Xprotect data via a Splunk TA making it easier for customers who use Splunk as SIEM. The data extracted is indexed by Splunk which can then be used by Xshield App for Splunk or other custom apps.