soar
GRR Rapid Response
Splunk SOAR Cloud
Splunk Built
Overview
This app implements various investigative actions from the GRR API
Supported Actions Version 2.0.6
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- list connections: List all the connections configured on the device
- list endpoints: List all the endpoints/sensors configured on the device
- get system info: Get information about an endpoint
- get file info: Look for files matching given criteria
- get browser cache: Retrieve matching regex in a client's browser cache
- get hunts: Retrieve available hunts
- get cron jobs: Retrieve available cron jobs
Supported Actions Version 2.0.5
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- list connections: List all the connections configured on the device
- list endpoints: List all the endpoints/sensors configured on the device
- get system info: Get information about an endpoint
- get file info: Look for files matching given criteria
- get browser cache: Retrieve matching regex in a client's browser cache
- get hunts: Retrieve available hunts
- get cron jobs: Retrieve available cron jobs
Supported Actions Version 2.0.3
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- list connections: List all the connections configured on the device
- list endpoints: List all the endpoints/sensors configured on the device
- get system info: Get information about an endpoint
- get file info: Look for files matching given criteria
- get browser cache: Retrieve matching regex in a client's browser cache
- get hunts: Retrieve available hunts
- get cron jobs: Retrieve available cron jobs
Release Notes
Version 2.0.6
Dec. 29, 2023
- Updated requests and certifi dependencies in order to use platform packages [PAPP-30822,PAPP-31096]
Version 2.0.5
April 13, 2022
- Marked the app as FIPS Compliant [PAPP-21848]
Version 2.0.3
Sept. 21, 2021
GRR Rapid Response Release Notes - Published by Splunk March 08, 2021
Version 2.0.3 - Released March 08, 2021
- Compatibility changes for Python 3 support