×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
qq-stan
Engager
Member since: ‎08-18-2022
‎07-30-2024
Community Statistics
Posts 2
Solutions 0
Karma Given 3
Karma Received 0
Member Since ‎08-18-2022
Activity Feed
View All

Re: Enterprise Security- How to Add Threat Intell...

by in Splunk Enterprise Security
‎08-07-2023 07:30 AM
‎08-07-2023 07:30 AM
Thank you, @meetmshah  "Cisco Threat Grid Add-On" is not exactly what I am looking for.  My objective is to feed ES with the MCAP threat intelligence from https://mcap.cisecurity.org/ using its API key/token, if that possible. Thank you for your response. ... View more

Enterprise Security- How to Add Threat Intelligen...

by in Splunk Enterprise Security
‎07-25-2023 11:35 AM
‎07-25-2023 11:35 AM
Splunk ES documentation https://docs.splunk.com/Documentation/ES/7.1.1/Admin/Downloadthreatfeed#Add_a_URL-based_threat_source  describes how to Add a URL-based threat source and it seems work even with credential using POST. What if I have to use API Key instead of credentials? How to download Threat Intelligence from a remote API using API Keys? From  MCAP https://mcap.cisecurity.org/ for instance. Thank you for your time in advance. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎07-30-2024 11:53 AM
Karma given to
View All