VMRay & Splunk Security Information and Event Management Integration
Splunk Inc. provides the leading platform for Operational Intelligence. Splunk® software searches, monitors, analyzes and visualizes machine-generated big data from websites, applications, servers, networks, sensors and mobile devices. More than 12,000 organizations use Splunk software to deepen business and customer understanding, mitigate cybersecurity risk, improve service performance and reduce costs.
How Our Integration Works
The VMRay – Splunk Add-on enables users to automatically import valuable security information from VMRay Analyzer into Splunk. This includes VMRay analysis results, severity scores, Indicators of Compromise (IOCs) and YARA rule matches. In addition, it also allows users to automatically blacklist files with high severity scores via Splunk Enterprise Security.
