- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jamie1
Communicator
05-19-2023
03:56 AM
Hi There,
I am currently looking at a search within Splunk Security Essentials (Concentration of Attacker Tools by Filename).
The search mentions a file named "tools.csv", which I assume is a list of the attacker tools mentioned in the title of the search.
Is there any way that I can access the contents of the CSV file? Purely because I want to see which tools are listed.
Any help would be appreciated,
Jamie
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
05-19-2023
04:19 AM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
05-19-2023
04:19 AM
You could try
| inputlookup tools.csv
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jamie1
Communicator
05-19-2023
04:40 AM
Hi There,
That worked 🙂
Cheers,
Jamie
