How To Detect Active Directory Threats Using Splunk
This video covers how to ingest data into Splunk and monitor the events of an Active Directory domain to discover potential threats.
It will also cover how to set up an alerting system to notify us for any suspicious behavior.
Splunk is a security information and event management system (SIEM). It is a centralized source that logs specified security information from multiple machines, such as logins and account lockouts.
This data is normalized, processed, and then analyzed by security analysts to monitor, detect, prioritize, and remediate potential threats that can arise.
In this video, need to enable logon auditing in the policy management.
for that, You need to go to your domain controller and open Group Policy Management. Edit the Default Domain Policy.
🌸 Support channel & make donation :
www.paypal.me/aminenina/10
🌸 Subscribe for more videos :
KZread: / aminosninatos
🌸 Follow me On Social Media
Facebook : / aminosninatos
***********************************************************************
🌸 How To Monitor Windows Active Directory with Splunk
• How To Monitor Windows...
🌸 How To Install And Integrate Splunk Universal Forwarder on Windows
• How To Install And Int...
🌸 How To Install And Integrate Splunk Universal Forwarder In Linux
• How To Install And Int...
🌸 Cisco ASA Visualization in Splunk
• Cisco ASA Visualizatio...
🌸 Cisco ASA Splunk Basic Searching & Reporting
• Cisco ASA Splunk Basic...
🌸 How To Configure Splunk As Syslog Server for Cisco ASA
• How To Configure Splun...
🌸 Cisco ISE Configuring TACACS+ Authentication for CISCO ASA
• Cisco ISE Configuring...
🌸 How To Configure Cisco ASA for Sending Syslog Messages
• How To Configure Cisco...
🌸 Cisco ASA Basic Troubleshooting Commands
• Cisco ASA Basic Troubl...
🌸 Cisco ASA TCP Connection Flags Explained
• Cisco ASA TCP Connecti...
🌸 Cisco ASA Firewall Packet Tracer for Network Troubleshooting
• Cisco ASA Firewall Pac...
🌸 How to execute Linux Commands on Cisco IOS
• How to execute Linux C...
🌸 How to configure AAA authentication on Cisco IOS
• How to configure AAA a...
🌸 How to protect Cisco devices against DoS attacks
• How to protect Cisco d...
🌸 How To protect Cisco Devices against CDP Flood Attack
• How To protect Cisco D...
🌸 How to prevent SNMP Attack on Cisco IOS devices
• How to prevent SNMP At...
🌸 How to protect Cisco Devices against HSRP Attack
• How to protect Cisco D...
🌸 How to protect Cisco Devices against DHCP Denial of service
• How to protect Cisco D...
🌸 How to protect Cisco Devices against ARP poisoning attack
• How to protect Cisco D...
🌸 How to protect Cisco Devices against Vlan Hopping Attack
• How to protect Cisco D...
🌸How to protect Cisco Devices against SSH brute force attack
• How to protect Cisco D...
🌸 What ia the difference between Cisco IOS and IOS XR
• What ia the difference...
🌸 How to exploit Cisco Router using RouterSploit Framework
• How to exploit Cisco R...
🌸 How to pentest Cisco Devices using cisco-torch tool
• How to pentest Cisco D...
🌸 How to exploit Cisco Devices TFTP Server
• How to exploit Cisco D...
🌸 How to exploit Cisco Devices SNMP using Kali Linux
• How to exploit Cisco D...
🌸Cisco configuration Archive & Rollback Feature
• Cisco configuration Ar...
***********************************************************************
#splunk #activedirectory #windows