Splunk Search

Has any one created SPL query for detecting Lateral movement of users

dikshaj
Engager

I am currently trying to create a SPL query to detect any suspicious lateral Movement to be detected from windows logs.
I have created query to detect user activity on multiple device but unable to get any luck on Lateral movement query.

Tags (1)
0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...