The RBA Community

SA-CrowdstrikeIntelIndicators

This supporting add-on Adds CrowdStrike's intelligence indicators to Splunk Enterprise Security's threat framework.

threat_object_fun

An illustrative app for working with Threat Objects.

.github

rba-community

Website for the RBA Community

SA-CortexXDRDevices

This supporting add-on comes with prebuilt content for Palo Alto Networks Cortex XDR data to be easily used with Splunk Enterprise Security's Asset database.

SA-PaloAltoIoTDevices

This supporting add-on comes with prebuilt content for Palo Alto IoT data to be easily used with Splunk Enterprise Security's Asset database.