Demo Video: Splunk & Industrial Defender Integration

See how the Industrial Defender for Splunk app increases the effectiveness of using Splunk in OT environments by helping analysts to quickly identify and mitigate potential cybersecurity issues. Using Splunk’s Common Information Model (CIM) and OT Security Add-on, we’ll show you how you can quickly access critical contextual data coming from Industrial Defender, including:

• Asset data like criticality, vulnerabilities, location and owner
• How an asset is categorized
• How asset behavior has changed over time
• Detailed subnet data
• Information about security events, firewall status, NetFlow and removeable media events