Integrations / SIEM
Splunk
New, returning and fixed findings reach Splunk through its HTTP Event Collector after each run.
What Vardion sends
- Time
- New, back or fixed
- Finding id
- Check
- Title
- Severity
- Host
- Address
- Port
- Owner
- Kind
- Status
- First seen
- ATT&CK techniques
- Known exploited CVEs
- Ransomware mark
- Workspace
- Source tag
Evidence never leaves Vardion: what is sent says what was found and where, never what was seen there.
See it with your own tools
A demo on your domain, with the integrations you run.