Dashboards & Visualizations

How to create mitre att&ck tactics Dashboard

NDabhi21
Explorer

how to create a  mitre att&ck tactics dashboard for Splunk Enterprise Security cloud solution with using any app.

Used Below query how ever its not give the historic data 

| sseanalytics
| table name usecase hasSearch includeSSE datasource displayapp app journey category domain icon description dashboard mitre killchain alertvolume bookmark_status
| search (usecase="*") (category="*") *
| stats count by mitre
| search mitre!="None"
| sort + count

Labels (1)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!