Resecurity Introduces Native Integration with Splunk

Resecurity announced the implementation of a native integration with Splunk, delivered through a dedicated app published on Splunkbase.

This seamless integration enables organizations of any size to connect Resecurity’s cyber threat intelligence with the Splunk global ecosystem, facilitating the timely ingestion of indicators of compromise and indicators of attack, along with ongoing enrichment of security events and logs within existing monitoring and investigation workflows.

Through the Splunk app, cybersecurity teams can ingest threat intelligence feeds from Resecurity into Security Information and Event Management and Security Operations Center, using industry-standard mechanisms such as the TAXII protocol. This enables organizations to incorporate actionable intelligence from Resecurity and correlate it with internal telemetry.

Once ingested, indexed threat intelligence data can be used to enrich logs and accelerate visibility by providing additional context for analysis, alerting, and investigation.

Source: Resecurity media announcement