About Splunk Security Content
Splunk Security Content delivers security analysis guides called Analytic Stories. These Analytic Stories, which are authored by the Splunk Security Research Team, give you advice on how to use Splunk Enterprise Security (ES) to investigate and take action on new threats that Splunk ES detects in your environment. They contain the searches you need to implement the story in your own Splunk ES environment. Each story also provides an explanation of what the search achieves and how to convert a search into adaptive-response actions, where appropriate.
How to use Splunk Security Content
This documentation applies to the following versions of Splunk® Security Content: 3.21.0, 3.22.0, 3.23.0, 3.24.0, 3.25.0, 3.26.0, 3.27.0, 3.28.0