Dataminr Pulse for Splunk Enterprise and Splunk Cloud

Overview

Dataminr Pulse brings the most advanced AI-powered real-time intelligence into Splunk Enterprise and Splunk Cloud, easily fitting into your workflows and enabling rapid identification and mitigation of emerging threats so you can deliver faster time to detection and response.

Swiftly Close The Loop From Insight to Response

Effectively detect, prioritize and manage risk to protect your physical and digital assets with the fastest real-time alerting to discover threats as they unfold.

Broad Global Threat Coverage at Unmatched AI Speed

Dataminr has been the global leader in AI for risk detection since 2009. Dataminr Pulse is relied on by two thirds of Fortune 100 companies to inform their physical and cybersecurity operations. Every day, the Dataminr multi-modal AI platform analyzes billions of public data inputs in 105 languages from over 500K global sources including the deep and dark web, enabling you to:

• Gain real-time visibility into deep and dark web sources including markets, forums, paste sites, and ransomware group sites
• Get first notice on emerging attacks impacting your network and third parties affecting your business.
• Detect risk at a global scale and track the emergence and global spread of vulnerabilities so you can proactively mitigate risk.
• Identify new ransomware groups and track attacks as they happen, giving you visibility of attacks impacting your or third party risk perspective.

Pulse for Cyber Risk Key Use Cases

• Digital Risk: Respond quickly to early warning of risks to your organization’s digital assets.
• Third-Party Risk: Mitigate risk to your organization with increased visibility into threats to your subsidiaries and third parties.
• Vulnerability Intelligence: Prioritize patching with visibility to the entire lifecycle of a vulnerability.
• Cyber-Physical Risk intelligence: Respond to real-time alerts on cyber threats affecting physical assets, and vice versa.

Accelerate and Enrich SOC Workflows

• Improve incident investigation and response.
• Enrich and accelerate triage with contextual intelligence.
• Support analysis and threat hunting workflows.
• Create SIEM alerts on trending external threats and vulnerabilities.
• Determine threat identification, scoring and classification by type, severity and status.
• Assign threats to analysts and teams.

Release Notes

Version 2.0.0

June 10, 2024

New Digital and Third Party Risk dashboard showing the latest data breaches, leaked credentials, domain impersonations, account impersonations, and service outages
New Vulnerability Intel dashboard showing the latest trending and emerging vulnerabilities, latest vulnerability alerts, vulnerabilities being actively exploited, and much more
Updated Cyber-Physical Risk Intel dashboard, with new zooming feature that enables you to zoom to your office/asset locations instantly by clicking on their names in your asset list
Expanded support for the Splunk Common Information Model, adding support for vulnerabilities, malware, and alerts
Support for Splunk Enterprise Security with ability to create notable events, and also mapping our cyber metadata to the Threat Intelligence Framework
Support for ingesting alerts from Dataminr via webhook (as an alternative to API) for real-time alert streaming
Updated credential storage and streamlined app setup process

Version 1.2.3

Oct. 6, 2023

Updated packaging flags for improved Splunk Cloud support.

535

Downloads

Share Subscribe

Version

Built by

Dataminr Pulse

Support

Developer Supported

Contact Developer Questions on Splunk Answers Flag as inappropriate

App Contents: Inputs

Compatibility

Products: Splunk Enterprise, Splunk Cloud

Splunk Versions: 9.2, 9.1, 9.0

Platform: Platform Independent

CIM Versions: 5.x

Splunk Versions: 9.2, 9.1, 9.0

Platform: Platform Independent

CIM Versions: 5.x

Licensing

Customer License Agreement for App

Category & Contents

Categories: Threat Intel

App Type: App

Subscribe Share

My Account

Support & Services