{"id":7823,"date":"2026-02-12T12:44:51","date_gmt":"2026-02-12T10:44:51","guid":{"rendered":"https:\/\/scalemedia.co.za\/cybermedia\/?post_type=docs&p=7823"},"modified":"2026-02-12T12:48:12","modified_gmt":"2026-02-12T10:48:12","password":"","slug":"intrusion-detection-with-splunk","status":"publish","type":"docs","link":"https:\/\/scalemedia.co.za\/cybermedia\/docs\/intrusion-detection-with-splunk\/","title":{"rendered":"Intrusion Detection With Splunk (Real-world Scenario)"},"content":{"rendered":"\n

Introduction to Intrusion Detection With Splunk<\/h2>\n\n\n\n

The Windows Event Logs & Finding Evil<\/code> module familiarized us with log exploration on a single machine to pinpoint malicious activity. Now, we’re stepping up our game. We’ll be conducting similar investigations, but on a much larger scale, across numerous machines to uncover irregular activities within the entire network instead of just one device. Our tools will still include Windows Event logs, but the scope of our work will broaden significantly, demanding careful scrutiny of a larger pool of information, and identifying and discarding false positives whenever possible.Copy<\/p>\n\n\n\n

\n\n
\n
\n
\n <\/span>\n <\/span>\n <\/span>\n <\/div>\n \n
\n
\n \ud83d\udcd8<\/span>\n <\/div>\n \n
\n filename.js<\/span>\n <\/div>\n <\/div>\n <\/div>\n\n
\n
\n