cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
faizshir
Loves-to-Learn
Member since: ‎10-07-2022
‎07-03-2023
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎10-07-2022
View All

Server in DMZ to Internal DNS Servers - Threat Det...

by in Security
‎07-02-2023 11:41 PM
‎07-02-2023 11:41 PM
Hi, We have permitted some firewall rules from Public DMZ to internal services including our DNS servers. While, we are in a process to host a DNS server dedicated for DMZ devices, we need to monitor any suspicious activity from any device directed towards the internal DNS server. What is the best way to achieve this? We looked for rules in Splunk Security Essentials but they didn't really help.  ... View more
Labels

Re: Detect SMB version used in environment

by in Splunk Search
‎10-07-2022 02:33 AM
‎10-07-2022 02:33 AM
Thanks Chaker. I have the STM app installed but I am unable to see any events within it. Would I be using the 'search & reporting' with stream as the sourcetype to view events, specifically to identify events with the details of SMB version in use. Pardon me for being a noob. ... View more

Is there a way to identify/search what SMB version...

by in Splunk Search
‎10-07-2022 01:41 AM
‎10-07-2022 01:41 AM
Hello Splunkers, Is there a way to identify/search what SMB version is being used across the network? I am looking to detect SMBv1 specifically to use it as a source for disabling SMBv1 throughout the network. Regards ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎07-03-2023 03:08 AM