Q: I upgraded to a newer version of the Recorded Future for Splunk SOAR app and my integration stopped working. What happened?
A: The newer versions (v3.x.x+) of the Recorded Future for Splunk SOAR app are built on a new set of APIs. If you upgraded from Recorded Future for Splunk SOAR v1.x.x or Recorded Future for Splunk SOAR v2.x.x to Recorded Future for Splunk SOAR v3.x.x+, you will need a new API token from Recorded Future. To request a new token for Recorded Future for Splunk SOAR token, please fill out the Recorded Future support form requesting integration support for a new API token for Splunk SOAR.
Q: What are the commands that are available in the Recorded Future for Splunk SOAR integration?
A: A current list of commands can be found on the Recorded Future for Splunk SOAR Support Page
Q: Can you do malware sandbox submissions with our Splunk SOAR integration?
A: Yes, if you own the Recorded Future for Splunk Integration and are a SecOps or Threat Intelligence user with Recorded Future, you have access to the Recorded Future Sandbox App for Splunk SOAR.