Activity Feed
- Posted Re: Help me in rewriting the SPL on Splunk Search. 03-05-2024 05:44 AM
- Posted Re: Help me in rewriting the SPL on Splunk Search. 03-04-2024 04:36 AM
- Posted Help me with the SPL on Splunk Search. 03-04-2024 02:28 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
03-05-2024
05:44 AM
@ITWhisperer , This above query is based on https://www.splunk.com/en_us/blog/security/active-directory-lateral-movement-detection-threat-research-release-november-2021.html if possible pls help me in making a query as per the sample event. thanks
... View more
03-04-2024
02:28 AM
Hi, Could some one pls help me the lateral movement which look for a user with remote NTLM (type 3) logins on an abnormal number of destinations. Thanks
... View more
