The Resilient app integrates the IBM Resilient SOAR Platform with Splunk to simplify and streamline the process of escalating and managing incidents. Escalating a Splunk alert or Splunk ES notable event to the Resilient platform allows the platform to generate a detailed, incident-specific response plan that enables security team members to quickly respond.
Additionally, security team members can add artifacts and other incident details to incident records, and can leverage built-in threat intelligence to gather valuable context needed to inform an intelligent and decisive response.
Complete documentation is available on GitHub: https://github.com/ibmresilient/resilient-reference/tree/master/developer_guides/resilient-splunk-addon
For support, please visit https://ibm.com/mysupport . Do not use the 'Contact Developer' link, as that email address is not monitored.