Default Version 2.0.2
September 17, 2021
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9
Rating
0
(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#1
in Sandbox
This app integrates with Moloch to support various investigative actions
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get pcap: Download the pcap file from server and add it to the vault
- list fields: List all fields on which user can query
- list files: List all pcap files
Categories
Sandbox
Created By
Splunk LLC
Source Code
GitHub(Opens new window)Type
connector
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing