- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What is "Malware Domains threatlist" in Splunk Enterprise Security?
Ananta
New Member
08-15-2022
09:16 AM
Hi All,
We are planning to upgrade Splunk ES from 6.2 to 7.0.1. In Release Notes of 7.0.1 deprecated features, its mentioned like below.
No support for Malware Domains threatlist | The Malware Domains threatlist is not supported in Enterprise security version 6.5.0 or higher. |
Is it any kind of lookup definition as mentioned in below link?
https://community.splunk.com/t5/Security/Add-domains-to-threat-lists/td-p/116392
Or its related to below dashboard in Enterprise Security Suit?
SplunkEnterpriseSecuritySuite/Security Intelligence/Threat Intelligence/Threat Activity/Threat Group/Threat Group (malwaretriage)
Basically, I am not able to find out which feature is going to deprecate or remove. Please su
