Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
中文简介正在准备中。当前显示原文说明。
28 个 · 按相关度排序
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
中文简介正在准备中。当前显示原文说明。
Query and interpret security logs you are authorized to read. Build detections and investigations without leaking PII.
中文简介正在准备中。当前显示原文说明。
Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection. Covers Windows event logs, firewall logs, proxy logs, and authentication data analysis. Activates for requests involving Splunk investigation, SPL queries, SIEM log analysis, security event correlation, or log-based incident investigation.
中文简介正在准备中。当前显示原文说明。
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
中文简介正在准备中。当前显示原文说明。