threat object

threat object

noun

An unusual point or pattern in a dataset detected by Splunk Enterprise Security that deviates from an established baseline and poses a security breach, indicates a hardware or software problem, indicates shifting customer demands, or shows any number of challenges that require immediate attention, such as a payload command.

Related terms

• indicator
• observable

For more information

In Administer Splunk Enterprise Security:

• Add a threat object to modify an adaptive response action