blog.soclib.netSOC Library - SOC Library

Follow us on SOC Library Blog Categories SOC Incident Responce Playbook Dashboards Red Team Threat Detection Threat Intelligence Tools TR Rules UseCase Vulnerability Splunk Splunk Enterprise Splunk Enterprise Security Splunk Phantom Search SOC Library Blog Categories SOC Incident Responce Playbook Dashboards Red Team Threat Detection Threat Intelligence Tools TR Rules UseCase Vulnerability Splunk Splunk Enterprise Splunk Enterprise Security Splunk Phantom Everything You Need For Building The Appropriate SOC Capability SOC Library Tuning,UseCase,Threat Detection,SIEM,Playbook Security Operations Center Library Selection of our best topics in the blog. Playbook Malware Playbook July 8, 2022 Splunk Enterprise Splunk Configuration file precedence July 11, 2022 Tools Sentinel-Attack May 29, 2022 UseCase Hunting The Empire January 1, 2023 UseCase Event Categories and Recommended UseCase(Part1) June 10, 2022 UseCase Splunk Queries for Detecting Anomalous URIs in Web Traffic June 17, 2022 UseCase Event Categories and Recommended UseCase (Part two) October 2, 2022 Recent Articles 0 clap-icon - UseCase Hunting The Empire Empire tool is one of the post-exploitation frameworks with an HTTP module; attackers can use it for various malicious purposes, for example, C&C. Empire HTTP traffic analysis Using the Empire and its HTTP module: After the attacker infiltrates the victim... January 1, 2023 Read more 1 clap-icon - UseCase Event Categories and Recommended UseCase (Part two) This post is part two of Event Categories and Recommended UseCase, you can see part one : The guidelines provided in this article help SOC professionals in understanding and respond to security monitoring requirements in a more professional manner. Additionally,... October 2, 2022 Read more 0 clap-icon - Splunk Enterprise Splunk Configuration file precedence How does Splunk prioritize and merge the configuration files? When editing configuration files, it is important to understand how Splunk software evaluates these files and which ones take precedence. When incorporating changes, Splunk software does the following to your configuration... July 11, 2022 Read more 2 clap-icon - Playbook Malware Playbook July 8, 2022 Read more Date May 2024 M T W T F S S 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 « Jan Shape Tags anti spam antivirus CTI detection detection rule Incident Responce Index time rule search time soc splunk threat hunting tools web shellContact Everything You Need For Building The Appropriate SOC Capability In this web site, All copyright is observed SOCLib by SP © All rights reserved Rule Playbook VIP ContentHit enter to search or ESC tofor: By using this website, you agree to our cookie policy....