topic Re: Query for basic malware outbreak in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625063#M217287 <P>Thanks for your reply, but we are using Trend Micro Apex One as an antivirus and we are able to extracting from the same.</P><P>Could you please confirm that&nbsp;TA for Microsoft Windows Defender will support Trend Micro Apex One?</P> Thu, 22 Dec 2022 09:25:23 GMT Deeksha 2022-12-22T09:25:23Z How to query for basic malware outbreak? https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625028#M217271 <P>I need a query for basic malware outbreak</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Deeksha_0-1671675972843.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/23116iF93D64DBA2BCDA4D/image-size/medium?v=v2&amp;px=400" role="button" title="Deeksha_0-1671675972843.png" alt="Deeksha_0-1671675972843.png" /></span></P> <P>&nbsp;</P> <P>Need query with server IP and server name from this raw logs.</P> Thu, 22 Dec 2022 15:35:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625028#M217271 Deeksha 2022-12-22T15:35:42Z Re: Query for basic malware outbreak https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625030#M217272 <P>you have to install ta-windows for extract fields and use field to query</P><P>search example:<BR />index=* source="WinEventLog:Security" | table _time src src_ip dest action app signature</P> Thu, 22 Dec 2022 03:00:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625030#M217272 yottanat2021 2022-12-22T03:00:42Z Re: Query for basic malware outbreak https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625063#M217287 <P>Thanks for your reply, but we are using Trend Micro Apex One as an antivirus and we are able to extracting from the same.</P><P>Could you please confirm that&nbsp;TA for Microsoft Windows Defender will support Trend Micro Apex One?</P> Thu, 22 Dec 2022 09:25:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-query-for-basic-malware-outbreak/m-p/625063#M217287 Deeksha 2022-12-22T09:25:23Z