Mapping to Mitre attack techniques

Splunk Enterprise

HI All, We have couple of searches as shown below
1. User Login From Suspicious Countries

2. Multiple AWS Console Failed Login Attempts from Different Source IPs

3. High CPU or Memory Usage on a server

Can someone pls advise which Mitre techniques can each one of these be mapped to?

Thanks

Get Updates on the Splunk Community!

You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at ...

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas Do you ever feel ...

Join the Conversation