Blue Coat’s Malware Analysis application for Splunk enables all of the advanced threats that have been detected and analyzed by the Blue Coat Malware Analysis Appliance to be sent to Splunk. This will provide security analysts a consolidated view of these threat events in Splunk for rapid response. Analysts can also review and pivot into the Blue Coat Malware Analysis Appliance to perform a deeper investigation and remediate. The Blue Coat Malware Analysis Appliance provides Splunk Enterprise with actionable intelligence that combines static, dynamic, and reputational analysis techniques. This adaptive and customizable sandbox solution delivers enterprise-class, comprehensive malware detonation and analysis using a unique approach to quickly analyze suspicious files and URLs, interact with running malware to reveal its complete behavior, and expose zero-day threats and unknown malware.
(0)
Categories
Created By
Type
Downloads
Splunk Answers
Resources