Using Internet resources, research what Splunk can alert on. Find one example of a circumstance that a forensic analyst would want to be alerted on. Describe the circumstances and the Windows events needed.

Topic: Splunk®
Using Internet resources, research what Splunk can alert on. Find one
example of a circumstance that a forensic analyst would want to be
alerted on. Describe the circumstances and the Windows events needed.

Here is a reference reading, Hands-on Incident Response and Digital Forensics, by Mike Sheward.
Chapter 11: “Capturing a Moving Target”
Here is a URL link to my Ebook mentioned above.
https://eds-s-ebscohost-com.libauth.purdueglobal.edu/eds/detail/detail?vid=0&sid=904a941a-297c-4ce2-ae01-7c713f30f149%40redis&bdata=JnNpdGU9ZWRzLWxpdmU%3d#

Last Completed Projects