HEAT attacks are a class of cyber threats targeting web browsers as the attack vector and employs techniques to evade detection by multiple layers in current security stacks including firewalls, Secure Web Gateways, sandbox analysis, URL Reputation, and phishing detection. HEAT attacks are used to deliver malware or to compromise credentials, which in many cases leads to ransomware attacks The Menlo Security HEAT Analyzer Splunk App analyzes log data to identify HEAT attacks that evade URL reputation tools. These attacks are called Legacy URL Reputation Evasion (LURE) attacks.