VMRay & Splunk Phantom SecOps Automation Integration
Phantom is the first community-powered security automation & orchestration platform. Phantom’s open and extensible architecture helps you work smarter, respond faster, and strengthen your defenses.
Learn More about Splunk Phantom
How our Integration Works
The VMRay – Phantom App enables security teams to design playbooks in Phantom that involve analyzing a file in VMRay Analyzer and retrieving the analysis results and associated threat intelligence. VMRay Analyzer can be used as part of several Phantom playbooks including Phishing Investigation and Response or Ransomware Investigation and Containment to mitigate the risk of potentially malicious files.
