New report: Synthetic Phantom Read it →
All integrations

SIEM · ENRICHMENT

Splunk + Etugen

Enrich Splunk events and alerts with Etugen’s risk-scored attacker infrastructure, right where your analysts already work.

What you get

  • Indicator lookups from inside your searches and dashboards
  • Category, location and a 0–100 risk score on every IP and domain
  • Alarms on watched indicators delivered as events
  • Your logs correlated against live C2 and malware hosting

How it works

  1. Create an API key

    Generate a key in your Etugen workspace. Keys are scoped to your organization.

  2. Connect Splunk

    Add the key to the Etugen integration in Splunk.

  3. Start enriching

    Indicators in your events are categorized and scored as they arrive.

More SIEM integrations

GET ACCESS

Put Etugen inside Splunk.

Every plan includes API access, starting with Free.

Get access View pricing