Integrate with Splunk through the Mandiant Advantage App - August 31, 2022
We're excited to announce the addition of Attack Surface Management (ASM) to the Mandiant Advantage App for Splunk.
Easy Entity and Issue Management
With customizable data pulls, Splunk customers can easily manage Entities and Issues directly within the Splunk Enterprise interface. The App uses the ASM API to provide control over the scope of data pulled:
- Project and Collection
- Issue Severity
- Timeframe (All time or Daily)
- Schedule an API query (Hourly or Daily)
Visit Splunkbase to add the Mandiant Advantage App to your Splunk Enterprise Security instance. The step-by-step App configuration directions are available on the Documentation Site.
Mandiant Advantage Threat Intelligence, Digital Threat Monitoring, and Security Validation are also available through the App.
The legacy Intrigue Splunk integration will be deprecated by the end of November.
New Insights Reports - August 17, 2022
We're excited to announce two new Insights Reports:
- Entities with the Most Inferred CVEs - Inferred CVEs are mapped based on the vendor, version, and technology fingerprints, where we have not actively tested for the vulnerability. Customers can quickly assess and prioritize investigating entities with inferred CVEs.
- Top Prevalent Technology Labels - Identify the applications and services most used in your ecosystem.
We will continue to expand the reporting capabilities and welcome all customer feedback.
Even more visibility with our Akamai DNS Edge integration! - August 4, 2022
Akamai DNS Edge is the latest integration to date. By integrating with Akamai, we’ll take your DNS associated with Akamai and give you even more visibility of your attack surface through our automated discovery engine.
Similar integrations are also available for Cloudflare and GoDaddy.
If you’re a Project Owner, find and configure all your integrations here.
UX Enhancements - August 1, 2022
URI Entity Updates
- URI details are easier to view on the entity page
- Assess URI details without leaving the Entities page with the new table view pop-out. Click on the URI title to view.
Dozens of New Technology Fingerprints
FastApi, Flask, Sinatra, and more. See the Technology Definitions Library for more information.