How to detect webshell via splunk

Monitoring Splunk

Hi,

I would like to know how I can detect a webshell via Splunk.

I hope there is a doc that can help me to write a ( detect webshell queries )

Thanks.

any help for that !

Get Updates on the Splunk Community!

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Are you a member of the Splunk Community?