Kaspersky Threat Intelligence Portal for Splunk Phantom is a Splunk® Phantom app that allows you to look up threat intelligence information about IP addresses, URLs, domains, and hashes on Kaspersky Threat Intelligence Portal, and gives you access to Kaspersky Advanced Persistent Threat (APT) Intelligence reports.
Kaspersky Threat Intelligence Portal for Splunk Phantom has the following features:
The detailed information includes the link to the Kaspersky Threat Intelligence Portal page with full information about the indicator, the number of detection events related to the indicator, and the name of the APT report that mentions the indicator.
Kaspersky Threat Intelligence Portal for Splunk Phantom runs in the Splunk Phantom platform version 4.2.
Page top