The following table illustrates the enhanced capabilities that the Aura Asset Intelligence Add-On offers when compared to Splunk Enterprise Security out of the box.
|Enhanced Capabilities||Aura Asset Intelligence Add-On||Splunk ES|
|Real-time asset discovery using advanced correlation and logic.||✓||☓|
|Build and populate Splunk ES asset and identity tables.||Automatic||Manual|
|Updating of Splunk ES asset inventory, to ensure accurate notable event and alert asset enrichment.||Near real-time||Manual|
|Accurate attribution of assets and identities for events at any point in time.||✓||☓|
|Asset and Identity investigator swimlanes to illustrate asset attribution activity over time.||✓||☓|
|Dedicated Asset Intelligence menu, providing Aura’s powerful asset intelligence reporting, investigation and attribution capabilities from within Splunk ES.||✓||☓|
|Workflow actions to allow for investigation and searching of network assets, IPs or user identities found in any notable event or raw search.||✓||☓|
Get Aura Asset Intelligence
Contact us today for more information and discover the benefits that real-time asset intelligence and attribution can bring to your enterprise.