soar
iSight Partners
Splunk SOAR Cloud
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
This app integrates with iSight Partners' ThreatScape product to pull campaign reports and provide hunting capabilities
Supported Actions Version 3.0.1
- test connectivity: Validate the asset configuration for connectivity
- hunt file: Look for information about a file hash in the ThreatScape product database
- hunt domain: Look for information about a domain in the ThreatScape product database
- hunt ip: Look for information about an IP in the ThreatScape product database
- hunt url: Look for information about a URL in the ThreatScape product database
- get report: Get report details
- on poll: Callback action for the on_poll ingest functionality
Supported Actions Version 3.0.0
- test connectivity: Validate the asset configuration for connectivity
- hunt file: Look for information about a file hash in the ThreatScape product database
- hunt domain: Look for information about a domain in the ThreatScape product database
- hunt ip: Look for information about an IP in the ThreatScape product database
- hunt url: Look for information about a URL in the ThreatScape product database
- get report: Get report details
- on poll: Callback action for the on_poll ingest functionality
Supported Actions Version 2.0.8
- test connectivity: Validate the asset configuration for connectivity
- hunt file: Look for information about a file hash in the ThreatScape product database
- hunt domain: Look for information about a domain in the ThreatScape product database
- hunt ip: Look for information about an IP in the ThreatScape product database
- hunt url: Look for information about a URL in the ThreatScape product database
- get report: Get report details
- on poll: Callback action for the on_poll ingest functionality
Supported Actions Version 2.0.4
- test connectivity: Validate the asset configuration for connectivity
- hunt file: Look for information about a file hash in the ThreatScape product database
- hunt domain: Look for information about a domain in the ThreatScape product database
- hunt ip: Look for information about an IP in the ThreatScape product database
- hunt url: Look for information about a URL in the ThreatScape product database
- get report: Get report details
- on poll: Callback action for the on_poll ingest functionality
Release Notes
Version 3.0.1
April 28, 2025
- Update Python dependencies for vulnerabilities, package updates, and platform built-in removals
- Update Python dependencies for Python 3.13 support
- Update NOTICE file with updated dependencies
- Apply pre-commit fixes
Version 3.0.0
Feb. 25, 2022
- De-certifying and releasing as a community app [PAPP-24532]
Version 2.0.8
Jan. 25, 2022
iSight Partners Release Notes - Published by Splunk January 25, 2022
Version 2.0.8 - Released January 25, 2022
- Marked the app as FIPS Compliant [PAPP-21840]
Version 2.0.4
Sept. 21, 2021
iSight Partners Release Notes - Published by Splunk April 05, 2021
Version 2.0.4 - Released April 05, 2021
- Compatibility changes for Python 3 support