Cybersecurity

Building Threat Intelligence Enrichment In Splunk

The skill automates IOC enrichment pipelines in Splunk Enterprise Security, ingesting threat feeds into KV Store collections and correlating them with security events via lookup tables, modular inputs, and the Threat Intelligence Framework. It enables SOC analysts to integrate threat intelligence into correlation searches, flag IOC matches, and significantly reduce triage time.

Publisher / source

Cybersecurity Skills (Community)

Upstream record

mukul975/Anthropic-Cybersecurity-Skills

Version

Version 3

Published

2026-06-20

Publication review

Approved for publication

Content fingerprint

8e3886a7a0632f2866c92c85ef92cc5729379d56880fcdf52e534efe99f1ae4e