Silent Push Details Threat-Intelligence Integrations for Splunk, Tines and ServiceNow
Summary
Silent Push describes integrations that send its threat-intelligence data to Splunk, automate triage and blocking through Tines, and add threat context to ServiceNow incidents. The vendor reports Threat Check lead times averaging 154 days.
Key points
- The Splunk integration enriches SIEM/SOAR data with Indicators of Future Attack (IOFAs), Traffic Origin data, and Threat Check verdicts.
- Tines workflows can use Silent Push data to enrich alerts, route cases, or automatically push matching infrastructure to a firewall or WAF.
- The ServiceNow integration attaches risk scores, campaign links, threat-actor associations, and related infrastructure to incidents.
- Silent Push says Threat Check identified infrastructure an average of 154 days before it appeared in other feeds, with a 117-day median and more than 300 days for sophisticated actors.
- The vendor says Traffic Origin identifies an upstream connection origin beyond standard GeoIP information.
- Silent Push says its API-first platform also supports custom workflows and pre-built playbooks.
Article Details
- Event Type
- Security platform integration overview
- Impact
- Silent Push integrations with Splunk, Tines, and ServiceNow are presented as ways to enrich alerts and incidents with threat-intelligence context, automate triage, and proactively block infrastructure. Silent Push reports that Threat Check identified infrastructure an average of 154 days before it appeared in other feeds, with a median of 117 days and more than 300 days for sophisticated threat actors; these are company-reported figures.
MITRE ATT&CK
People
Vendors
ServiceNowServiceNow integration attaches Context Graph intelligence to incidents, adding risk scores, campaign links, and related infrastructure.Silent PushSilent Push emphasizes integrating threat intelligence into existing workflows rather than adding standalone tools.SplunkSplunk integration enriches SIEM/SOAR data with IOFAs, Traffic Origin, and Threat Check to detect staged infrastructure earlier.TinesTines integration enables automated alert triage and proactive blocking of pre-weaponized infrastructure without manual steps.
Products
Context GraphServiceNow integration attaches Context Graph intelligence to incidents, adding risk scores, campaign links, and related infrastructure.ServiceNowServiceNow integration attaches Context Graph intelligence to incidents, adding risk scores, campaign links, and related infrastructure.SplunkSplunk integration enriches SIEM/SOAR data with IOFAs, Traffic Origin, and Threat Check to detect staged infrastructure earlier.Threat Check API[Data/Signals] enrichment and verdict services – Threat Check API, Context Graph, Traffic OriginTinesTines integration enables automated alert triage and proactive blocking of pre-weaponized infrastructure without manual steps.Traffic OriginSplunk integration enriches SIEM/SOAR data with IOFAs, Traffic Origin, and Threat Check to detect staged infrastructure earlier.