This add-on integrates Cyber Triage to allow you to collect and analyze endpoint data using Cyber Triage. It will send an agentless collection tool to the remote endpoint, retrieve volatile and file system data, and analyze it for evidence of an intrusion. You can then import the Cyber Triage result back into splunk.