NetFlow Optimizer Security Module Set contains several Modules reporting communications with known threats. You can use these events in Splunk Enterprise Security App, or in our NetFlow Analytics for Splunk App.
These Modules need to be configured to get threat feeds. Use NFO Updater component to set and schedule updates of these feeds.
For more details please see Security section in NetFlow Optimizer User Guide located in Resources > Documentation at www.netflowlogic.com.