threat object

threat object


An observable, such as a URL, file hash, or email address, that poses an increased security risk or is at risk of being the target of a threat.

Related terms

For more information

In Administer Splunk Enterprise Security:

In Investigate and Respond to Threats in Splunk Mission Control: