About jfcshunter - Splunk Community

Topics I've Started

https://docs.splunksecurityessentials.com/content-detail/showcase_huge_volume_dns_requests/ Now is the updated DNS tunnelling article

Good answer thanks, link updated for newest version (July 2021): https://docs.splunk.com/Documentation/Splunk/8.2.1/SearchReference/Join

For those looking into this: https://docs.splunksecurityessentials.com/content-detail/detection_of_dns_tunnels/

Karma given to

User

Karma Count

Splunk Employee

1

1

1

1

1