Boss Of The SOC v1 - Question

Marcos · ‎11-28-2020

Estou realizando o Boss Of The SOC v1 - SIEM, Splunk, porém não estou conseguindo entender a pergunta 14

Um dos domínios encenados do Po1s0n1vy tem algumas informações Whois “exclusivas” desarticuladanão sei o que colocars. Concatene os dois códigos e envie como uma única resposta.

não estou conseguindo achar a resposta ...

alguma sugestão?

to4kawa · ‎11-30-2020

index=botsv1 dest_ip=23.22.63.114 "poisonivy-is-coming-for-you-batman.jpeg" src_ip=192.168.250.70 sourcetype=stream:http
| table _time site request

Foi este?

Boss Of The SOC v1 - Question

configuration

installation

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Index This | What travels the world but is also stuck in place?

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

Join the Conversation

Boss Of The SOC v1 - Question

configuration

installation

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Index This | What travels the world but is also stuck in place?

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...