SEC
보안 데스크
해시, 인코딩, 헤더, 직접 실행하고 싶은 검사. 여기서는 계정을 요구하지 않습니다.
385–408 / 915
Splunk MFA Fatigue Detection Generator
사용 가능Generate a tuned Splunk detection for mfa fatigue with field mapping and false-positive guidance
도구 열기Splunk Login from Tor or Anonymizer Detection Generator
사용 가능Generate a tuned Splunk detection for login from tor or anonymizer with field mapping and false-positive guidance
도구 열기Splunk Service Account Interactive Logon Detection Generator
사용 가능Generate a tuned Splunk detection for service account interactive logon with field mapping and false-positive guidance
도구 열기Splunk Security Log Cleared Detection Generator
사용 가능Generate a tuned Splunk detection for security log cleared with field mapping and false-positive guidance
도구 열기Splunk New Scheduled Task Created Detection Generator
사용 가능Generate a tuned Splunk detection for new scheduled task created with field mapping and false-positive guidance
도구 열기Splunk New Service Installed Detection Generator
사용 가능Generate a tuned Splunk detection for new service installed with field mapping and false-positive guidance
도구 열기Splunk Suspicious PowerShell Execution Detection Generator
사용 가능Generate a tuned Splunk detection for suspicious powershell execution with field mapping and false-positive guidance
도구 열기Splunk Office App Spawning Shell Detection Generator
사용 가능Generate a tuned Splunk detection for office app spawning shell with field mapping and false-positive guidance
도구 열기Splunk Security Tool Disabled Detection Generator
사용 가능Generate a tuned Splunk detection for security tool disabled with field mapping and false-positive guidance
도구 열기Splunk Kerberoasting Detection Generator
사용 가능Generate a tuned Splunk detection for kerberoasting with field mapping and false-positive guidance
도구 열기Splunk RDP Exposed to Internet Detection Generator
사용 가능Generate a tuned Splunk detection for rdp exposed to internet with field mapping and false-positive guidance
도구 열기Splunk Ransomware File Activity Detection Generator
사용 가능Generate a tuned Splunk detection for ransomware file activity with field mapping and false-positive guidance
도구 열기Splunk Large Outbound Data Transfer Detection Generator
사용 가능Generate a tuned Splunk detection for large outbound data transfer with field mapping and false-positive guidance
도구 열기Splunk DNS Tunneling Detection Generator
사용 가능Generate a tuned Splunk detection for dns tunneling with field mapping and false-positive guidance
도구 열기Splunk Web Attack Patterns Detection Generator
사용 가능Generate a tuned Splunk detection for web attack patterns with field mapping and false-positive guidance
도구 열기Splunk Cloud Admin Login Without MFA Detection Generator
사용 가능Generate a tuned Splunk detection for cloud admin login without mfa with field mapping and false-positive guidance
도구 열기Splunk Security Group Change Detection Generator
사용 가능Generate a tuned Splunk detection for security group change with field mapping and false-positive guidance
도구 열기Splunk Mailbox Forwarding Rule Created Detection Generator
사용 가능Generate a tuned Splunk detection for mailbox forwarding rule created with field mapping and false-positive guidance
도구 열기Splunk Lateral Movement via PsExec Detection Generator
사용 가능Generate a tuned Splunk detection for lateral movement via psexec with field mapping and false-positive guidance
도구 열기Splunk Pass-the-Hash Detection Generator
사용 가능Generate a tuned Splunk detection for pass-the-hash with field mapping and false-positive guidance
도구 열기Splunk Credential Dumping (LSASS Access) Detection Generator
사용 가능Generate a tuned Splunk detection for credential dumping (lsass access) with field mapping and false-positive guidance
도구 열기Splunk Registry Run Key Persistence Detection Generator
사용 가능Generate a tuned Splunk detection for registry run key persistence with field mapping and false-positive guidance
도구 열기Splunk Unusual Parent-Child Process Detection Generator
사용 가능Generate a tuned Splunk detection for unusual parent-child process with field mapping and false-positive guidance
도구 열기Microsoft Sentinel Firewall Deny Spike Detection Generator
사용 가능Generate a tuned Microsoft Sentinel detection for firewall deny spike with field mapping and false-positive guidance
도구 열기