Splunk Search

Has any one created SPL query for detecting Lateral movement of users

dikshaj
Engager

I am currently trying to create a SPL query to detect any suspicious lateral Movement to be detected from windows logs.
I have created query to detect user activity on multiple device but unable to get any luck on Lateral movement query.

Tags (1)
0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...

Splunk and Fraud

Watch Now!Watch an insightful webinar where we delve into the innovative approaches to solving fraud using the ...