28 skills · sorted by relevance
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
The English summary is being prepared. Showing the original description.
Query and interpret security logs you are authorized to read. Build detections and investigations without leaking PII.
The English summary is being prepared. Showing the original description.
Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection. Covers Windows event logs, firewall logs, proxy logs, and authentication data analysis. Activates for requests involving Splunk investigation, SPL queries, SIEM log analysis, security event correlation, or log-based incident investigation.
The English summary is being prepared. Showing the original description.
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
The English summary is being prepared. Showing the original description.