PaloAltoNetworks / Splunk_TA_paloalto
The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Networks Next-Generation Firewall devices and Advanced Endpoint Protection.
☆21Updated 4 years ago
Alternatives and similar repositories for Splunk_TA_paloalto:
Users that are interested in Splunk_TA_paloalto are comparing it to the libraries listed below
- Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…☆106Updated 5 months ago
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Updated 6 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- Skillets is the default holding place for useful Panhandler skillets. These are usually smaller one-off bits that may not require their o…☆11Updated 4 years ago
- Allows for MAC address to vendor mapping in Splunk☆16Updated last year
- Allows to pull asset and identity data into Splunk app for Enterprise Security from LDAP and other sources☆27Updated 7 years ago
- Grand Central logging for Cloud Services to Splunk☆36Updated 3 years ago
- ☆14Updated 8 years ago
- A tool for bulk URL queries against Palo Alto Networks' PAN-DB cloud database☆18Updated last year
- SELinux Policy for Splunk☆56Updated 5 years ago
- Data validator agains Splunk Common Information Model (CIM)☆75Updated 11 months ago
- WebUI of MineMeld☆43Updated 2 years ago
- MineMeld nodes for MISP☆19Updated last year
- Sunburst IOCs for Splunk Ingest☆18Updated 4 years ago
- ☆55Updated 3 years ago
- ☆16Updated 7 years ago
- Risk Based Alerting Supporting Add-On (SA) for Splunk☆45Updated 3 years ago
- A command line utility to aid in using autofocus for IR and research☆27Updated 5 years ago
- Process, reduce, and transform Palo Alto Networks Firewall logs.☆14Updated 5 months ago
- Palo Alto Networks Rule Parser☆16Updated 8 years ago
- Python class to submit events to Splunk HTTP Event Collector☆96Updated 11 months ago
- Splunk csv to KVStore ES Threat Intel☆11Updated 8 years ago
- Coding examples for the OpenDNS Investigate API☆23Updated 5 years ago
- Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook☆52Updated 4 years ago
- Azure Functions for getting data in to Splunk☆31Updated last month
- Read only mirror. To contribute or submit issues, please go to the website link --->☆13Updated last year
- Phantom Apps Repo☆82Updated 3 years ago
- Various Splunk Scripts and applets, all in one place☆32Updated this week
- Official Palo Alto Networks MineMeld docker☆17Updated 5 years ago
- Splunk (Other Splunk scripts which do not fit into the SplunkAdmins application)☆39Updated 6 months ago