topic Re: hunting guide pdf documentation missing in Splunk Enterprise Security

hunting guide pdf documentation missing

jolinchew — Tue, 28 May 2019 02:25:00 GMT

I try to find PDF documentation for Cyber-security hunting guide, I try below documentation link:

https://docs.splunk.com/Documentation/ES and https://docs.splunk.com/Documentation/Splunk

but no hunting guide, is there other place I can find, thanks

Re: hunting guide pdf documentation missing

smoir_splunk — Tue, 28 May 2019 17:01:58 GMT

Hi @jolinchew, there is a use case manual for ES, but nothing that is specifically a "cybersecurity hunting guide"

Re: hunting guide pdf documentation missing

DavidHourani — Tue, 28 May 2019 17:17:10 GMT

Hi @jolinchew,

Are you looking for something like this :
https://www.splunk.com/blog/2017/07/06/hunting-with-splunk-the-basics.html
And this :
https://www.slideshare.net/Splunk/threat-hunting-with-splunk-76027177

There's a lot of resources online including youtube videos and lots of blog posts around that subject !

Cheers,
David

Re: hunting guide pdf documentation missing

jolinchew — Wed, 29 May 2019 02:41:21 GMT

There is a PDF provided by splunk, which provide various splunk query to identify directory listing, CSRF, stored xss, reflective xss, sql injection, ransomware.... I will provide version number and detailed file name. this can't be found in current splunk website

not html or ppt, the PDF is quite long, with more than 100 pages