Splunking with Sysmon Part 4: Detecting Trickbot
Trickbot and Ryuk With the recent outbreak of Ryuk [...]
Using Splunk Streamstats to Calculate Alert Volume
Dynamic thresholding using standard deviation is a common method [...]
Splunking with Sysmon Part 3: Detecting PsExec in your Environment
PsExec is another powerful tool created by Windows Sysinternal. [...]
Your Splunk Guide for Smooth Sailing with CEF Field Extractions
One of the more common log formats you’ll run [...]
A Design with Humans in Mind: Adding Automation and Color Coding to the IT Workflow
Workflow is an essential part of a daily routine, from [...]
Using Splunk Enterprise Security to Look for Zerologon Exploit Attempts
A while back, Zerologon came along and helped everyone [...]
Day in the Life of a Data Junkie
As a Splunk administrator, I often find my first [...]
How Splunk Add-Ons Help You Stop Playing Hide and Seek with Your Logs
Do you like to play games? How about hide [...]
Splunking with Sysmon Series Part 2: Tuning
This Splunk tutorial is a continuation of my previous [...]
Why Splunk: The Benefits of Better Logging
Almost all devices have logs. As you may already [...]
