Splunk + OPSWAT

About Splunk

Splunk, a Cisco company, helps security and IT teams turn data from across their environments into real-time visibility and action. Its security solutions bring together analytics, SIEM, automation, and orchestration to help SOC teams investigate threats, prioritize incidents, and coordinate response across their security stack.

Splunk SOAR integrates with OPSWAT MetaDefender Aether™ to bring zero-day file and URL analysis directly into automated security workflows. From Splunk SOAR, security teams can submit suspicious files and URLs to Aether for analysis, search previous scan reports, and perform reputation lookups for files, IP addresses, domains, and URLs.

MetaDefender Aether applies its five-layer zero-day detection pipeline across Threat Reputation, Predictive AI, Adaptive Sandbox, Threat Scoring, and ML-powered Threat Hunting to deliver a consolidated verdict and enriched threat context. The integration helps analysts move from alert to investigation and response without manually transferring suspicious content or analysis results between tools.

Integrate MetaDefender Aether with Splunk SOAR via Splunkbase.