@tod_s  I've not done this with Flash specifically, but I recommend asking your vendor to suggest or provide methods of logging access to Flash content as an indicator of compromise. I mentioned proxies because they're often configured to re-encrypt traffic for inspection and logging. ... View more

https://github.com/splunk/botsv1 https://www.splunk.com/en_us/blog/security/boss-of-the-soc-scoring-server-questions-and-answers-and-dataset-open-sourced-and-ready-for-download.html ... View more