i need few usecases

[thaheseens]

PII Leaked
DNS Generator Anomaly
Encrypted C and C
Command Anomaly
Command and Control Repudation Anomaly
File Action Anomaly
PowerShell Remote Access
SQL Shell Command

[DavidHourani]

hi @thaheseens,

Here you go, lots of usecases to see here :

ES Dashboards :
https://docs.splunk.com/Documentation/ES/6.1.0/User/Overview

ES Content Update :
https://splunkbase.splunk.com/app/3449/#/details
List of usecases here :
https://docs.splunk.com/Documentation/ESSOC/1.0.52/stories/UseCase

SSE :
https://splunkbase.splunk.com/app/3435/#/details
List of usecases here :
https://docs.splunksecurityessentials.com/content-detail/

Hope this helps !

Cheers,
David

[to4kawa]

https://blogs.jpcert.or.jp/en/2017/09/chase-up-datper-bba7.html
https://splunkbase.splunk.com/app/3435/