In Splunk SOAR 6.3, SOAR features now come fully integrated with Splunk Enterprise Security 8.0. In this demo, see how to easily create a Splunk SOAR playbook in the context of your SIEM workflows. Playbooks and actions are now directly integrated within the Splunk Enterprise Security analyst queue. You can run playbooks and see the results without leaving the Splunk Enterprise Security interface. Both a Splunk SOAR and Splunk Enterprise Security license is required.

Prompt-driven automation in Splunk SOAR 6.3 lets you send real-time, secure prompts to teams outside the SOC to streamline response workflows and resolve security incidents faster. Deliver prompts through any ITOps, ChatOps or Ticketing applications.

A common question we get is, 'Can Tines integrate with X?' This question stems from the status quo around integration in general. Many people believe that app-based integration is the only way, and as a result, tools remain siloed. Tines co-founders Eoin Hinchy and Thomas Kinsella sought to change that, eliminating wrappers, and building Tines with an API-first mindset. In this episode of Friday Flows, host Cameron Higgs dives into some of the common stumbling blocks with SOAR integrations, and walks through multiple ways to connect Tines to your internal and external tools.

With Splunk SOAR, analysts can rise above drowning alert noise, focus on key security objectives and always stay ahead of evolving threats.