The Industrial Defender for Splunk app solves complex OT security data challenges by delivering security data events with deep asset context to analysts, so they can quickly identify and mitigate potential cybersecurity issues.
The app increases the effectiveness of using Splunk in OT environments by providing not just alert data, but also contextual asset information including location, criticality, and contact information for the OT asset owner. The Industrial Defender API Add-on for Splunk also eliminates the manual process of mapping the comprehensive data sets provided by Industrial Defender to the Splunk user interface.
Solution benefits include:
