Skip to content

Splunk SPLK-5001

Splunk Certified Cybersecurity Defense Analyst (SPLK-5001)

Threat HuntingEnglish

Practice session

Which type of threat hunt starts with an explicit theory like "if attackers are using PsExec for lateral movement, we should see specific service names in 4697 events"?

Loading your practice session…