You can use Splunk Phantom to start and stop VMs, take snapshots, and download memory snapshots for analysis. An asset is configured with the information required to communicate with the third-party product or service, such as IP address, automation service account, username, and password.įor example, Splunk Phantom ships with a VMware vSphere app enabling Splunk Phantom to get information from and take actions against a vSphere host.

There are no security restrictions on any app while it is running.Īn asset is a specific configuration, or instance, of an app.

You can upgrade existing apps or install new apps at any time without having to upgrade the entire Splunk Phantom platform.Īpps have full access to the operating system of the Splunk Phantom platform. For example, the MaxMind app provides the geolocate ip action for your Splunk Phantom deployment.

These third-party products and services provide actions you can run or automate in your Splunk Phantom playbooks. Splunk Phantom apps expand the capabilities of your Splunk Phantom instance by enabling connections to third party products and services. ™ ® Enterprise ® Universal Forwarder ® Data Stream Processor ® Cloud Services ® Attack Analyzer ® App for Splunk Attack Analyzer ® Add-on for Splunk Attack Analyzer ® Enterprise Security ® Mission Control ® SOAR (Cloud) ® SOAR (On-premises) ® User Behavior Analytics ® App for Fraud Analytics ® Security Essentials ® Security Content ® Security for SAP ® solutions ® Security Add-on for SAP ® solutions ® Security App for SAP ® solutions ® User Behavior Analytics Monitoring App ® User Behavior Analytics Kafka Ingestion App ® IT Service Intelligence ® IT Essentials Work ® IT Essentials Learn ® App for Content Packs ® ITSI Module for Application Performance Monitoring ® ITSI Event Management SDK ® Content Packs for ITSI and IT Essentials Work ® Service Intelligence for SAP ® Solutions ® Infrastructure Monitoring Add-on ® ITSI Module for Continuous Delivery ® Supported Add-ons ® Add-on for OpenTelemetry Collector ® Add-on Builder ® Firehose Nozzle for VMware Tanzu ® Connect for Kafka ® Connect for Zoom ® Connected Experiences ® Secure Gateway ® Private Spacebridge ® Edge Hub mobile app ® Edge Hub OS ® Mobile for iOS ® Mobile for Android ® TV for Apple TV (EOL) ® App for TV (EOL) ® TV Companion (EOL) ® for iPad (EOL) ® AR for iOS ® AR for Android ® App for Edge Hub and Augmented Reality ® TV for Android and Fire TV (EOL) ® Cloud Gateway (Legacy) ® Machine Learning Toolkit ® App for Data Science and Deep Learning ® App for Anomaly Detection ® AI Assistant ® Common Information Model Add-on ® Dashboards App ® InfoSec App ® App for Lookup File Editing ® App for SOAR ® App for SOAR Export ® Platform Upgrade Readiness App ® DB Connect ® ODBC Driver ™ ® Datasets Add-on ® App for AWS Security Dashboards ® VMware OVA for ITSI ® Add-on for Infrastructure ® App for PCI Compliance ® Add-on for Splunk UBA ® Add-on for Windows ® Add-on for Microsoft Exchange Indexes ® OVA for VMware and NetApp ® OVA for VMware Metrics ® Supporting Add-on for VMware ® Supporting Add-on for NetApp ® Supporting Add-on for Active Directory ® Phantom App for Splunk ® Automation Broker ® Phantom Remote Search ® Add-on for Splunk Phantom ® App for Chargeback ® SDKs ® SDK for Python Reference ® SDK for Java Reference ® SDK for JavaScript Reference ® logging for JavaScript ® logging for Java ® Web Framework ® Products Version Compatibility ® Validated Architectures ® Community ® Answers ® Style Guide ® Phantom (Legacy) ® Intelligence Management (Legacy) ®(Legacy) ® SDK for PHP Reference (deprecated) ® SDK for Ruby Reference (deprecated) ® Add-on for Microsoft Active Directory (Legacy) ® Add-on for Microsoft Windows DNS (Legacy) ® Add-on for Unix and Linux (Legacy) ® App for Windows Infrastructure (Legacy) ® App for NetApp Data ONTAP (Legacy) ® App for Unix and Linux (Legacy) ® Business Flow (Legacy) ® Deployment Monitor App (Legacy) ® Industrial Asset Intelligence (Legacy) ® for Industrial IoT (Legacy) ® ITSI Module for Cloud Services (deprecated) ® Metrics Workspace (Legacy) ™ (Legacy) ™ Management Console (Legacy) ™ App (Legacy) ™ Add-on (Legacy) ™ SDK for Android (Legacy) ™ SDK for iOS (Legacy) ™ REST API (Legacy) ® Mobile Access Server (Legacy) ® App for VMware (Legacy) ® App for AWS (Legacy) ® App for Infrastructure (Legacy) ® App for Microsoft Exchange (EOL)Īdd and configure apps and assets to provide actions in Splunk Phantom

Splunk phantom acquisition