Loki scanner is one of the famous yara rule scanner which have multiple usage in Incident Response and searching the environment for any indication of compromise. we decided to get benefit of Splunk capability and automate the scan activity from Splunk by creating addon to install it on agents and Application to help threat hunter and the analyst to review the result of scan more effectively