Splunk ES User Guide
How to use the TruSTAR App for Splunk Enterprise Security.
Features
Advanced Search
Auto Whitelisting
Cases
Chat
Company Whitelist
Dashboard
Data Export
Enclave Email Inbox
How to Submit Reports on TruSTAR
IOC Management
MITRE ATT&CK
Managing Users
Marketplace
Navigate a Visualization
Navigating the Report Panel in the New UI
Navigation Panel
Notes
Notifications and Alerting
Reports Management
Search, Filter & Sort
Threat Actors
TruSTAR Enclaves
TruSTAR Reports
Applications
SIEM
Orchestration
Case Management
Chrome Extension (New Version)
Okta App
Slack
TAXII Server
Intelligence Sources
Digital Risk/ATO
Endpoint
Cisco AMP Threat Grid
Cisco AMP Threat Grid Indicator Query
Crowdstrike Detect
Crowdstrike Falcon Intelligence
Crowdstrike Falcon Reports
Threat Intel Services
FireEye iSight
Flashpoint
IBM X-Force
IBM XForce IRIS
Intel 471 Adversary Intelligence
Intel 471 Alerts
Intel 471 Malware Intelligence
Recorded Future Hash List
Recorded Future IP List
Recorded Future URL List
Recorded Future Vulnerability List
VirusTotal
Trusted Community
Other
Technology
FAQs
Accounts
Admin changes on other accounts
Reset Credentials or Passwords
Setting Up Multi-Factor Authentication (MFA)
Setting up a 'Service Account'
TruSTAR Policies
Data Sources & Feeds
Automating Email Forwarding to an Enclave Inbox
Changing the TruSTAR Station theme
Error on Login
FAQs
How do I clear my cookies and cache?
How do I send ArcSight cases to TruSTAR?
Observables Supported
Product Walkthrough
Proofpoint configuration
Scripts for Enclave Data Submit/Export
What is the TruSTAR Community?
Product Release
