Detection On Demand App for Splunk Phantom

Analyze any file, object or URL with FireEye in your Splunk Phantom playbooks, regardless of where that alert was generated. FireEye compares your submission to the latest known tactics and signatures of threat actors using static analysis, artificial intelligence and machine learning. FireEye also determines the possibility of secondary or combinatory effects across multiple phases of the attack lifecycle to discover never-before-seen exploits and malware. Our new app can help you:

• Validate Alerts - Validate alerts from security tools against FireEye Detection On Demand to reduce false positives and to help teams focus on top threats. 
• Check websites – Investigate suspicious websites being viewed in an organization for malicious behavior.
• Threat Hunting: Get detailed reports on malicious files and websites to better understand what they do and how they work, which can help stop threats from spreading and prevent them from reoccurring in the future.