Team Cymru Announces Scout Threat Intelligence App for Splunk
Summary
Team Cymru announced a free, Splunk-certified Scout app for Splunk Enterprise and Cloud versions 9.0–9.2. It adds threat data and dashboards for enriching indicators, correlating log data, and supporting investigations.
Key points
- The app is Splunk-certified and compatible with Splunk Enterprise and Splunk Cloud versions 9.0, 9.1, and 9.2.
- It provides real-time and historical threat data, including tags, open ports, passive DNS, certificate details, fingerprints, WHOIS information, and communication timelines.
- Three dashboards support indicator enrichment, matching IPs and domains against existing logs, and live investigations using Splunk log data.
- The app can support alerts and reports, and indicators can be uploaded by CSV or through an API.
- Team Cymru says the app is free; users can sign up for a 30-day Scout trial.
Article Details
- Event Type
- Product announcement: Team Cymru introduced its Scout App for Splunk.
- Impact
- The free app brings real-time and historical threat intelligence from Pure Signal into Splunk dashboards. It supports IP and domain enrichment, log correlation, alerting, reporting, and investigations.
Vendors
Products
Pure SignalPure Signal, the world’s largest threat intelligence data ocean is now available as a Splunk DashboardPure Signal ScoutLast year, we launched Pure Signal Scout, a web-based threat-hunting and intelligence tool for security analysts of all experience levels.Scout App for SplunkToday, we proudly announce the Team Cymru Scout App for Splunk.Scout InsightI invite you to try Scout Insight and the Scout App for Splunk.SplunkPure Signal, the world’s largest threat intelligence data ocean is now available as a Splunk DashboardSplunk CloudThis app is Splunk certified, and compatible with Splunk Enterprise, and Splunk Cloud (versions 9.2, 9.1, 9.0).Splunk EnterpriseThis app is Splunk certified, and compatible with Splunk Enterprise, and Splunk Cloud (versions 9.2, 9.1, 9.0).