Splunk Search

Lateral movement search needed

AL3Z
Builder

Hi, 

I need an help with my windows security logs how we can create the lateral movement use case 

Labels (2)
0 Karma

yuanliu
SplunkTrust
SplunkTrust

This is a Splunk forum.  You need to describe in detail what your data source contains, and how an analyst will detect lateral movement without using Splunk, step by step.  Then, illustrate the desired output.

0 Karma
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened Audit Trail v2 wasn’t written in isolation—it was shaped by your voices. In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...