Security Jiujitsu
conf2015_DVeuve_Splunk_SecurityCompliance_SecurityJiujitsuBuildingCorrelation
conf2015_DVeuve_Splunk_SecurityCompliance_SecurityJiujitsuBuildingCorrelation
- No tags were found...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Techniques -‐ Frequency <br />
Understand your common raEos is easy – HTTP GET/POST/Connect/<br />
Delete <br />
You’ve been around for 2,5,10,20 years. Track how oRen you talk to <br />
different websites, and alert on newness <br />
Detect with top/rare/stats/Emechart <br />
63