This app allows you to enter your external subnets and get an idea of what the Internet sees when it looks at your network (okay what bad guys can see) externally. It utilized the Shodan (www.shodanhq.com) so you will need an API key and you will also need our SA-shodan add-on. Install SA-shodan Install App Restart Splunk Enter Subnets in config screen Either run the saved search manually or wait for it to run on schedule (every 12 hours by default) Enjoy! Please send support inquiries to firstname.lastname@example.org.
April 1, 2015
Fixed for 6.2 compatibility Fixed a bug where the configuration screen would freak out when there are too many entries
If you're looking for something different than the typical "one-size-fits-all" security mentality, you've come to the right place.