Splunk Enterprise Security

can you have a domain in a threatlist url?

Splunk Employee
Splunk Employee

Can you put in the url field of the threat list a domain value? For example, these were where domains were listed xxx.yyy.zzz.org or xxx.yyy.zzz.net, etc.

So effectively: domain, category, description and risk are the 4 fields populated.

0 Karma
1 Solution
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...