Splunk Phantom

VMRay & Splunk Phantom SecOps Automation Integration

Get central visibility, noise-free analysis & trustworthy threat intel

Phantom is the first community-powered security automation & orchestration (SOAR) platform. Phantom’s open and extensible architecture helps you work smarter, respond faster, and strengthen your defenses.

LEARN MORE ABOUT SPLUNK PHANTOM

How our Integration Works
The VMRay – Phantom App enables security teams to design playbooks in Phantom that involve analyzing a file in VMRay Analyzer and retrieving the analysis results and associated threat intelligence. VMRay Analyzer can be used as part of several Phantom playbooks including Phishing Investigation and Response or Ransomware Investigation and Containment to mitigate the risk of potentially malicious files.

SIGN UP FOR OUR CONNECTOR