Scenarios

This page is currently a work in progress. Any information presented here might be incomplete or incorrect, and frequent near-term updates are expected.

This topic provides a few common scenarios in which the Splunk App for Enterprise Security can used to discover and resolve security issues. Several different roles may be involved in resolving these issues.

Common security issues include:

• A brute force attack from a single source or multiple sources
• Blocked traffic coming from an unknown source
• Malware on systems with outdated anti-virus software
• Add a threat list to prevent access from malicious websites.