soc Archives

Splunk Queries for Detecting Anomalous URIs in Web Traffic

Prior to having a presence on the network, attackers are unlikely to be able to disguise web shell traffic as typical traffic for a targeted web server. In these cases, requests to the web shell are likely to have an...

June 17, 2022

UseCase

Event Categories and Recommended UseCase(Part1)

The guidelines provided in this article help SOC professionals in understanding and respond to security monitoring requirements in a more professional manner. Additionally, the use cases and correlation rules proposed in this article aid in making the security monitoring service...

June 10, 2022

Threat Intelligence

Understanding Cyber Threat Intelligence

Understanding Intelligence Intelligence is the processed and classified information that is elucidated by expert analysts. It is extracted from all sorts of reliable resources and is evaluated for pertinence. It is essential to understand that data or information alone cannot...

June 1, 2022

Tag: soc

Splunk Queries for Detecting Anomalous URIs in Web Traffic

Event Categories and Recommended UseCase(Part1)

Understanding Cyber Threat Intelligence

Rule

Playbook

VIP Content