Latest Version 2.4.1
December 20, 2024
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
Network Behavior Analytics for Splunk
Hundreds of security teams use this app to process CIM compliant DNS, IP, HTTP, TLS, and DHCP events within Splunk and flag compromised hosts. Use Network Behavior Analytics for Splunk to instantly uncover DNS and ICMP tunnels, DGA traffic, C2 callbacks and implant beaconing, data exfiltration, Tor and I2P anonymizing circuit activity, cryptomining, and threats without known signatures or indicators.
Built by AlphaSOC, Inc.
Compatibility
Not Available
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 6.x, 5.x, 4.x, 3.x
Rating
0
(0)
Log in to rate this app
Support
Developer Supported app
Hundreds of security teams use this app to process CIM compliant DNS, IP, HTTP, TLS, and DHCP events within Splunk and flag compromised hosts. Use Network Behavior Analytics for Splunk to instantly uncover DNS and ICMP tunnels, DGA traffic, C2 callbacks and implant beaconing, data exfiltration, Tor and I2P anonymizing circuit activity, cryptomining, and threats without known signatures or indicators.
Categories
Created By
AlphaSOC, Inc.
Type
app
Downloads
6,160
Licensing
Splunk Answers
Resources
Login to report this app listing