Cyber Risks · PortSwigger Research

Integrating Burp Suite DAST with Splunk - Port Swigger

Summary: PortSwigger documented how to integrate Burp Suite DAST with Splunk so that scanner issues stream directly into Splunk for real-time monitoring and event management. Cloud users must use Splunk Cloud Platform hosted on *.splunkcloud.com, and using the Vulnerabilities data model requires configuring a new Event type in the Splunk Common Information Model add-on.

What you should know: Routing scanner findings into the SIEM only pays off if the Vulnerabilities data model is wired up correctly - otherwise the issues arrive but never line up with the rest of your event data.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related