MARKETPLACE · CONNECTOR
Splunk (HEC)
Bring your Mindlapse audit trail into Splunk: your SOC correlates GRC activity with the rest of its security telemetry, in one place.
Connector sheet
AvailableSIEM HTTPS webhook Connected to Mindlapse
- Type SIEM
- Publisher Splunk (opens in a new tab)
Credentials encrypted at rest Scheduled rotation with expiry alerts Synchronizations orchestrated and logged
Splunk is where many security teams already search, correlate and alert on their telemetry. Connected to Mindlapse through the HTTP Event Collector, it receives the platform’s audit trail as it happens: who did what, on which record, from where.
The governance activity stops living in a separate console: a sensitive action in Mindlapse is an event in Splunk, next to the endpoint, identity and network events the SOC already correlates.
MINDLAPSE OS LAYER 01
Signals & Connectors
ERNEST plugs into your real-world signals: threat intelligence, continuous state analysis, marketplace integrations, documents and cyber knowledge.
Explore Mindlapse OS
IN MINDLAPSE
What Mindlapse does with it.
-
The audit trail, streamed
Every audit event the platform records (logins, sensitive actions, configuration changes, exports) is delivered to your HTTP Event Collector endpoint as it occurs.
-
Correlated with the rest
Events carry the actor, the organization, the record and the outcome, so your searches and correlation rules treat GRC activity like any other source.
-
Delivered under control
The collector token is stored encrypted, rotated on schedule with expiry alerts, and every delivery is logged on the Mindlapse side too.
CONNECTOR SECURITY
Connected, without becoming a liability.
- Credentials encrypted at rest
- Scheduled rotation with expiry alerts
- Synchronizations orchestrated and logged
MARKETPLACE
Also in the catalog.
- Microsoft Sentinel SIEM · Available Make every Mindlapse audit event visible in Microsoft Sentinel: your analysts detect and investigate from the console they already use.
- Elastic SIEM · Available Centralize Mindlapse activity in Elastic Security, searchable and alertable alongside your other security logs.
- IBM QRadar SIEM · Available Feed QRadar with Mindlapse audit events: your SOC correlates sensitive actions and configuration changes with its other sources.
A TECHNOLOGY TO CONNECT?
Running something we should speak to?
Tell us what your stack looks like: the catalog grows with our clients.