Applications

MITRE ATT&CK App for Splunk 

This application provides compliance and triage dashboards for MITRE ATT&CK Framework with drill-down capabilities.  It is fully integrated with Splunk Enterprise Security and Splunk ES Content Update. Detailed documentation can be found here.

​

Starting with version 2.2.0, you can subscribe to our API service to add more correlation searches pertinent to MITRE ATT&CK Framework.  Please visit Plans and Pricing for further details.

Firewall Rule Analysis App for Splunk

This application provides a dashboard that allows users to monitor firewall traffic according to frequently and rarely used rules. The goal is to provide recommendations based on rule groupings in order to optimize the number of firewall rules.