About pradeep577

pradeep577 · ‎02-24-2020

Oh. thank you for quick response..

pradeep577 · ‎02-24-2020

Hi, I accidently deleted a CSV file. Is there any way to restore it or retrieve the CSV file.

pradeep577 · ‎02-22-2020

Thank you for your response. So you are saying you are looking at the assets list on ES and mapping it to DT alerts.

pradeep577 · ‎02-19-2020

Hi, Can anybody helpme to get some use cases for darktrace. Right now I am looking only for score value.

pradeep577 · ‎10-08-2019

Thank you for your kind response...yes its generic question. Would it be best to have CMDB( config. management DB) pulled into SIEM & run the search against it.

pradeep577 · ‎10-07-2019

Hi, I need to be alerted when a rogue/unknown device is plugged into network. Any help will be appreciated.

pradeep577 · ‎07-09-2019

I added DC=*

pradeep577 · ‎09-05-2018

Hi, Has anybody tried the below scenario? If yes, can I get some guidance? Malicious IPs are shown on Splunk dashboard. I want the script to automatically scan these IP with Virustotal(if possible)...if found malicious, then it would add it to Cisco ASA ACL to block it. Is this possible?

pradeep577 · ‎08-31-2018

HI, can I get help on splunk query to find attacks on my external website like Cross site script, SQLi, RFI etc.

pradeep577 · ‎07-02-2018

Hi, Is it possible to whitelist windows service(xyz.EXE) traffic in splunk or should I whitelist user account?

pradeep577 · ‎06-01-2018

Still same please see attached screenshot It doesnt give me which logs are contributing to high license usage?

pradeep577 · ‎06-01-2018

Hi, Thnk you for quick reply. I executed this query | metadata type=sourcetypes index="wineventlog" | search totalCount>0 | table source totalCount Output is: Source: blank(empty) Total count : numbers

pradeep577 · ‎06-01-2018

Hi, I have been ask to generate report for top log sources which is generating lot of traffic. I need help to generate report as < sourcetype> Can someone from group help me in this. Currently Im using | metadata type=sources | where totalCount>0 | table source totalCount where i get source & total count but Iam looking for < sourcetype> format. Thanks in advance.

pradeep577 · ‎01-05-2017

I tried like this x_webcat_code_full="Uncategorized URLs" i did get results.

pradeep577 · ‎01-05-2017

Hi, I'm new to Splunk area. We have integrated Splunk with ironports. I need to search number of history to a particular website category for one hour. how do i go about it? Thank you in advance

pradeep577 · ‎04-06-2016

Hi All, I am planning to start learning about Splunk. I wanted to know the difference between Splunk and HP Arcsight. I have googled for it, but couldnt get convincing answers. Hence, thought of posting here. Does Splunk do same job as Arcsight used in Security Operation center. Can splunk be used to monitor/feed threat intelligence feeds and create threat intelligence reports. I downloaded free version of splunk..can I use it as SIEM tool for learning purpose Is splunk enterprise security tool and free version same ie., can i use it to monitor threat logs. Regards, Pradeep

Posts	16
Solutions	1
Karma Given	0
Karma Received	2
Member Since	‎04-06-2016

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Restore SCV

Any use cases for darktrace

How to alert when a rogue/unknown device is plugge...

Has anybody made a threat feed to firewall rule?

owasp top 10

whitelist user account or windows service

log sources

How to generate a search to find uncategorized URL...

What are the differences between Splunk vs HP Arcs...

Re: Restore SCV

Restore SCV

Re: Any use cases for darktrace

Any use cases for darktrace

Re: How to alert when a rogue/unknown device is pl...