I'm testing Splunk Phantom using the Community Edition to evaluate this product that seems great.
Configuring the Talos Intelligence version 1.0.1 application for Splunk Phantom (published by Splunk), it seems that the App is not working anymore since Talos moved to CloudFlare protection.
Testing connectivity is returning an error about enabling cookie support.
Please find the connectivity test result below:
App 'Talos Intelligence' started successfully (id: 1595335404831) on asset: 'talos intelligence'(id: 14)
Loaded action execution configuration
Doing test IP lookup...
Test Connectivity Failed.
1 action failed Status Code: 403. Data from server: Attention Required! | Cloudflare Please enable cookies. Sorry, you have been blocked You are unable to access talosintelligence.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. What can I do to resolve this? You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page. Cloudflare Ray ID: 5b6501eb1889b769 Your IP: X.X.X.X Performance & security by Cloudflare Select a Language English Español