PaloAltoNetworks / Splunk_TA_paloalto
The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Networks Next-Generation Firewall devices and Advanced Endpoint Protection.
☆21Updated 4 years ago
Alternatives and similar repositories for Splunk_TA_paloalto:
Users that are interested in Splunk_TA_paloalto are comparing it to the libraries listed below
- WebUI of MineMeld☆43Updated last year
- Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…☆106Updated 4 months ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 3 years ago
- scripts to configure the Splunk Universal Forwarder in a locked down state☆40Updated 6 years ago
- Allows for MAC address to vendor mapping in Splunk☆16Updated last year
- Skillets is the default holding place for useful Panhandler skillets. These are usually smaller one-off bits that may not require their o…☆11Updated 4 years ago
- Allows to pull asset and identity data into Splunk app for Enterprise Security from LDAP and other sources☆27Updated 6 years ago
- MineMeld nodes for MISP☆19Updated last year
- Palo Alto Networks Rule Parser☆16Updated 8 years ago
- A command line utility to aid in using autofocus for IR and research☆27Updated 5 years ago
- Data validator agains Splunk Common Information Model (CIM)☆75Updated 10 months ago
- Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook☆52Updated 4 years ago
- ☆55Updated 2 years ago
- A tool for bulk URL queries against Palo Alto Networks' PAN-DB cloud database☆18Updated last year
- Various Splunk Scripts and applets, all in one place☆32Updated 2 months ago
- ☆24Updated 6 years ago
- Configuration for a Palo Alto Networks fed ELK Stack with Visualizations☆74Updated 5 years ago
- JSON Tools Technology Add-On for Splunk☆10Updated 3 years ago
- Risk Based Alerting Supporting Add-On (SA) for Splunk☆45Updated 3 years ago
- Sysmon Splunk App☆46Updated 6 years ago
- Engine of MineMeld☆141Updated 2 years ago
- Splunk (Other Splunk scripts which do not fit into the SplunkAdmins application)☆39Updated 5 months ago
- Read only mirror. To contribute or submit issues, please go to the website link --->☆13Updated last year
- Repository with logstash, elasticsearch and kibana configs. Palo Alto, Juniper, BlueCoat, etc.☆18Updated 8 months ago
- Prototypes for MineMeld nodes☆39Updated 3 years ago
- Splunk csv to KVStore ES Threat Intel☆11Updated 8 years ago
- Docker Splunk "Orchestration" bash script (6,000+ lines) to create fully automated pre-configured splunk site-2-site clusters or stand al…☆138Updated 4 years ago
- Cisco eStreamer client☆25Updated 2 years ago
- Cerner's Splunk Cookbook☆30Updated last year
- Splunk app to support presentation at .conf2015 on free security tools and Splunk☆10Updated 9 years ago