News
Proofpoint Delivers Threat Context into Splunk Software
June 2016 by Marc Jacob
Proofpoint, Inc., announced an alliance with Splunk® to deliver customers value by providing data integrations into the Splunk security platform from Proofpoint’s email, social media, and threat intelligence solutions. These integrations provide customers with the ability to easily benefit from Proofpoint’s threat context, within the end-to-end security intelligence provided by Splunk software.
Available today, customers can use the new Proofpoint Protection Server Technology Add-on (TA) to send data from Proofpoint’s leading Enterprise Protection email solution into Splunk solutions, to correlate and validate against attack origin and data loss prevention rule violations captured by Proofpoint. This information can provide additional valuable security context within Splunk Enterprise and Splunk Enterprise Security (ES) for investigations directed at identifying targeted users, lateral movement and/or exfiltration.
In addition, this alliance enables Splunk customers to use the Proofpoint Social Media Protection TA for Splunk to add context from Social Patrol to Splunk security solutions. Customers can now send Social Patrol alerts to Splunk software to help with investigations into social phishing links, malware, fraudulent accounts, threats to brand reputation and user privilege modifications.
Customers can also now use Proofpoint Emerging Threats TA for Splunk to bring Proofpoint’s Emerging Threats Intelligence feed into Splunk’s security platform. Emerging Threats provides actionable threat intelligence with global context, identifying the source and type of malicious activity on hundreds of thousands of malicious IP addresses and domains, all updated hourly.
