This is a Splunk app that is designed to fetch vulnerabilities from the National Vulnerability Database (NVD) (https://nvd.nist.gov/). The app will fetch new vulnerabilities created on this database every day. The vulnerability can be used by the SOC analyst to relate it to there resources.
Sample Use Case:
1. An organization named Acme has 100 machines with OP Ubuntu 20.04.3 installed.
2. The organization is using Splunk to manage security potential.
3. Splunk already has the list of machines in the organisation
4. A new vulnerability is created on NVD about operating system Ubuntu 20.04.3 yesterday
5. Splunk app fetched vulnerability data today.
6. The SOC analyst now has both data in Splunk; now he knows that 100 systems are vulnerable. He needs to raise a ticket for the system team to apply a patch to these systems.