Splunk Enterprise Security

Is there way to use hash or file name matches for threatlist?

mcronkrite
Splunk Employee
Splunk Employee
0 Karma
1 Solution

jervin_splunk
Splunk Employee
Splunk Employee

No, this is not currently supported. There is work going on in this area for a forthcoming release of Enterprise Security.

View solution in original post

0 Karma

jervin_splunk
Splunk Employee
Splunk Employee

No, this is not currently supported. There is work going on in this area for a forthcoming release of Enterprise Security.

View solution in original post

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!