Default Version 2.0.4
September 17, 2021
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9
Rating
0(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#4 in Investigative
This app provides free investigative actions
Supported actions
- test connectivity: This action will run the test domain to check the connectivity with the threat crowd server and this action will not affect any other actions irrespective of the connectivity result
- lookup domain: Queries ThreatCrowd for domain info
- lookup email: Queries ThreatCrowd for email info
- lookup ip: Queries ThreatCrowd for IP info
- file reputation: Queries ThreatCrowd for file reputation
Categories
Investigative
Created by
Splunk LLC
Source code
Type
connector
Splunk Answers
Resources
Log in to report this app listing.