Default Version 2.0.2
September 17, 2021
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9
Rating
0(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#1 in Sandbox
This app integrates with Moloch to support various investigative actions
Supported actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get pcap: Download the pcap file from server and add it to the vault
- list fields: List all fields on which user can query
- list files: List all pcap files
Categories
Sandbox
Created by
Splunk LLC
Source code
Type
connector
Splunk Answers
Resources
Log in to report this app listing.