threat object

threat object

noun

An observable, such as a URL, file hash, or email address, that poses an increased security risk or is at risk of being the target of a threat.

Related terms

• indicator

For more information

In Administer Splunk Enterprise Security:

• Prioritizing threat objects over risk objects in risk incident rules

In Investigate and Respond to Threats in Splunk Mission Control:

• Assess threats using intelligence data in Splunk Mission Control