2020-02-12T17:16:43Z
Miriam Tover - PeerSpot reviewer
Service Delivery Manager at PeerSpot (formerly IT Central Station)
  • 0
  • 277

What is your primary use case for Splunk Phantom?

How do you or your organization use this solution?

Please share with us so that your peers can learn from your experiences.

Thank you!

8
PeerSpot user
8 Answers
Norman Freitag - PeerSpot reviewer
Account-Manager at Consist ITU Environmental Software GmbH
Real User
Top 5
2022-08-12T12:06:36Z
Aug 12, 2022

We primarily use the solution for supporting or automating the email spam items and some ISMS monitoring items, et cetera.

Search for a product comparison
Tarun Singh - PeerSpot reviewer
Manager Project Management at HCL Technologies
Real User
Top 5
2022-06-02T08:01:54Z
Jun 2, 2022

Splunk Phantom can be deployed on the cloud, on-premise, and hybrid. If you want to put it to your cellphone or public cloud to use cloud services, such as Amazon AWS or Google Cloud Platform it is possible. The main usage of Splunk Phantom is for security monitoring, insider threat protection, user and entity behavioral analytics (UEBA), Security orchestration, automation, privileged user and account protection, and security against attacks, such as phishing and advanced malware attacks.

Filip Stojkovski - PeerSpot reviewer
VP - Security Automation Lead at a financial services firm with 10,001+ employees
Real User
Top 10
2022-04-11T12:26:57Z
Apr 11, 2022

Security Operations and Incident response processes automation and alerts enrichment.

MO
Cyber Security Solution Architect at a tech services company with 11-50 employees
Real User
Top 20
2021-04-26T15:04:26Z
Apr 26, 2021

My primary use case was for the MITRE ATT&CK parameters. I have some experience with MITRE ATT&CK for SIEM and SOAR solutions.

HariHaran - PeerSpot reviewer
Technical Analyst at a tech vendor with 11-50 employees
Real User
Top 10
2021-01-22T22:52:15Z
Jan 22, 2021

We are doing some automation on the SIM and we are getting some SIMS and we are looking for some automation to improve the security environment. That's how we are currently using Splunk.

Abhinav Roy - PeerSpot reviewer
Senior Data Analyst at a financial services firm with 10,001+ employees
Real User
2020-08-23T08:17:28Z
Aug 23, 2020

We're not really creating the use cases. Our internal team is developing the use cases. Right now, we have automated the whole phishing process. After that we are still planning to automate a few more things like malware investigation and then from there other processes.

Learn what your peers think about Splunk Phantom. Get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
654,218 professionals have used our research since 2012.
SA
Technical Lead at Paladion Networks
Real User
2020-04-30T10:58:00Z
Apr 30, 2020

Our primary use case of the solution is for fine tuning. We provide professional services for our customers to enhance their ability to use the functionalities of Splunk. We're integrators of the solution.

Al Sedghi - PeerSpot reviewer
Chief Technology Officer at Globalnet Research Corporation
Reseller
Top 10
2020-02-12T17:16:43Z
Feb 12, 2020

We are a consulting firm and this is a solution that we use for ourselves, as well as implement it for our customers. Our use case is to establish a platform for threat analysis across different data sources that we have in the company. Essentially, it is an orchestration platform and we want to make sure that we can tie into different endpoints or data sources from which traffic originates. We need to then detect and analyze threats.

Related Questions
WM
User at VAE-MARMARA8
Apr 16, 2021
Hi peers, I'm looking for a technical comparison between Splunk Phantom SOAR and FireEye SOAR solutions. Can anyone help with the insights?
it_user434868 - PeerSpot reviewer
Senior Director of Delivery at a tech services company with 51-200 employees
Aug 12, 2022
If you were talking to someone whose organization is considering Splunk Phantom, what would you say? How would you rate it and why? Any other tips or advice?
2 out of 8 answers
Al Sedghi - PeerSpot reviewer
Chief Technology Officer at Globalnet Research Corporation
Feb 12, 2020
My advice to anybody who is considering this solution is to first really understand the requirements that you have, well enough. You need to identify and understand the data sources that you need, prior to purchase, to ensure that there is a need and also that there are no issues with incompatibility or connectivity. You also need to have the right resources to assess, implement, or oversee the implementation. You're going into an environment that requires a little bit of understanding of artificial intelligence because the SOAR platform requires setting up some rules. You also need to have a technical support group in-house to be able to help, otherwise, you would be dependent on Splunk for assistance. Overall, this product is fairly good but it's not quite mature yet. It needs some enhancement and some stabilization in some areas. I would rate this solution an eight out of ten.
SA
Technical Lead at Paladion Networks
Apr 30, 2020
It's important to know your customer's requirements so you can choose the correct solution. The budget also needs to be taken into account. Most customer's budgets suit a Splunk solution whereas RSA is much more expensive. I would rate Splunk Phantom a seven out of 10.
Related Articles
Janet Staver - PeerSpot reviewer
Tech Blogger
May 16, 2022
PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to better connect with peers and other independent experts who provide advice without vendor bias. Our users have ranked these solutions according to their valuable features, and discuss which features they like most and why. You can read user reviews for the Security Orchestration Automation and Re...
Related Solutions
Related Articles
Janet Staver - PeerSpot reviewer
Tech Blogger
May 16, 2022
Top Security Orchestration Automation and Response (SOAR) Solutions
PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to...
Download Free Report
Download our free Splunk Phantom Report and get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
DOWNLOAD NOW
654,218 professionals have used our research since 2012.