Skip to main content
Preempt app icon

Preempt

This app implements various incident management and investigative actionsBuilt by Splunk LLC
soar product badge
Default Version 2.0.3

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#23 in DevOps

This app implements various incident management and investigative actions

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • on poll: Ingest from Preempt
  • get user attributes: Gets the attributes of a user
  • get user risk: Gets the risk of a user
  • watch user: Watch a user
  • unwatch user: Stop watching a user
  • get incident: Get information about an incident
  • update incident: Update the incident state and/or add a comment to the incident
  • get user activity: Get user activity from the specified number of hours ago