hunting guide pdf documentation missing

[jolinchew]

I try to find PDF documentation for Cyber-security hunting guide, I try below documentation link:

https://docs.splunk.com/Documentation/ES and https://docs.splunk.com/Documentation/Splunk

but no hunting guide, is there other place I can find, thanks

[DavidHourani]

Hi @jolinchew,

Are you looking for something like this :
https://www.splunk.com/blog/2017/07/06/hunting-with-splunk-the-basics.html
And this :
https://www.slideshare.net/Splunk/threat-hunting-with-splunk-76027177

There's a lot of resources online including youtube videos and lots of blog posts around that subject !

Cheers,
David

[smoir_splunk]

Hi @jolinchew, there is a use case manual for ES, but nothing that is specifically a "cybersecurity hunting guide"

[jolinchew]

There is a PDF provided by splunk, which provide various splunk query to identify directory listing, CSRF, stored xss, reflective xss, sql injection, ransomware.... I will provide version number and detailed file name. this can't be found in current splunk website

not html or ppt, the PDF is quite long, with more than 100 pages