Transcription of Security use cases using splunk - Infosec Resources
{{id}} {{{paragraph}}}
Example: bankruptcy
Security use cases using splunk - Infosec Resources
1 Security USE cases using splunk | Security Use cases with splunk This article focuses on Security use cases that can be created and managed within splunk . For this article we will be using splunk Free Enterprise version as it gives me indexing of 500MB free every day. Also this will be standalone architecture to collect, parse and extract events rather a distributed architecture where multiple components are required to collect, parse, extract and display event in splunk . Software Used: splunk (Free Enterprise Version) Version: Log Source: Windows Event Logs, Registry logs splunk Indexer, splunk Search Head: Local System (Windows 7) Install splunk 1.
security use cases using splunk | ‘Set’ action will generate a Set event when a program executes a SetValue method on a Registry subkey, thus setting a value or overwriting an existing value on an existing Registry entry.
Loading..
Tags:
Information
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document: