Splunk Enterprise Security

Where do I find the macro "src_dest_tracker" listed in a Corr. search in ES to detect Spyware activity?

SamHTexas
Builder

This posting did not let me share the search string due to it containing HTML code etc. Any advice is appreciated. Thank u 

Labels (1)
0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!