Filtered by tag: splunk × Clear
.webp)
Criminal IP Launches New TI Feed App on Splunkbase for Automated Threat Detection
Matched: health
AI SPERA has launched the Criminal IP TI Feed app for Splunk on Splunkbase. The app automatically correlates Criminal IP threat intelligence with firewall traffic logs to identify whether organizational assets communicated with malicious IPs and if sessions were completed. It runs correlation searches every 10 minutes, performs 30-day retrospective analysis, and offers seven dashboards plus Slack alerting to help SOC teams prioritize threats efficiently.