Splunk Search

Has any one created SPL query for detecting Lateral movement of users

dikshaj
Engager

I am currently trying to create a SPL query to detect any suspicious lateral Movement to be detected from windows logs.
I have created query to detect user activity on multiple device but unable to get any luck on Lateral movement query.

Tags (1)
0 Karma

to4kawa
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...